Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

asa dmz and nat

All,

I'm setting up an ASA, and I have a question about nat translations.

If I have:

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0

Will the above be sufficient to get internet access if I have 4 interfaces:

inside: 192.168.1.0

dmz1: 192.168.2.0

dmz2: 192.168.3.0

dmz3: 192.168.4.0

Or do I need to set up a pool for all of the dmz interfaces? I think the 1 global and 1 nat should work for all to go out as the interfaces address.

Thanks,

John

HTH, John *** Please rate all useful posts ***
1 ACCEPTED SOLUTION

Accepted Solutions
Green

Re: asa dmz and nat

You would also need....

nat (dmz1) 1 0.0.0.0 0.0.0.0

nat (dmz2) 1 0.0.0.0 0.0.0.0

nat (dmz3) 1 0.0.0.0 0.0.0.0

2 REPLIES
Green

Re: asa dmz and nat

You would also need....

nat (dmz1) 1 0.0.0.0 0.0.0.0

nat (dmz2) 1 0.0.0.0 0.0.0.0

nat (dmz3) 1 0.0.0.0 0.0.0.0

Re: asa dmz and nat

Thank you!

HTH, John *** Please rate all useful posts ***
191
Views
0
Helpful
2
Replies
CreatePlease to create content