ASA nat query

Tejas Kunte · ‎11-25-2011

i have an ASA 5520 runnng 8.4(1)

it has the following interfaces

WAN - public IP

DMZ - public IP

Prod - 192.168.1.X

for internet access i have the following statement

object network Prod_Subnet_Internet

nat (Production,WAN) dynamic interface

do i need a similar statement if hosts in the Prod network need to access hosts in the DMZ ?

cadet alain · ‎11-25-2011

Hi,

If DMZ hosts are not on the internet then you don't need to as by default nat-control is disabled.

Regards.

Alain

Don't forget to rate helpful posts.

Tejas Kunte · ‎11-25-2011

dmz hosts are on the internet, they all have public IPs

cadet alain · ‎11-25-2011

Hi,

Then you need to do a NAT because private adresses are not routeable on the internet.

Regards.

Alain

Don't forget to rate helpful posts.

Tejas Kunte · ‎11-25-2011

1 more thing

i am able to ping those dmz ips without a nat stmt

is icmp handled differently ?