Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Nat-C not happening from DMZ to Inside

I was trying to perform NAT-C on ASA 8.2. The setup was pretty simple. I had an Inside (Security-Level 100) interface, DMZ (Security-Level 50) and an Outside Interface (Security-Level 0).

 

I wanted to perform Nat from DMZ hosts to Inside hosts. When I used "nat" & "global" commands, it didn't work (all required ACLs were in place).

 

Is it something like NAT-C wont happen for lower security level to higher security level if we use nat & global statements (I know, static statement works in this case but I want to know about nat & global)

Everyone's tags (3)
3 REPLIES
Silver

NAT control requires that

NAT control requires that packets traversing from an inside interface to an outside interface match a NAT rule; for any host on the inside network to access a host on the outside network, you must configure NAT to translate the inside host address. NAT-C will not work when traffic coming from lower security level going towards higher security level.

Community Member

Thanks, is there any

yes

Thanks, is there any particular reason for "NAT-C will not work when traffic coming from lower security level going towards higher security level." or this is the way its developed ?

And can you please refer to any such link/article/book where this statement resides ?

Silver

Reference: http://www.cisco

Reference: http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/nat_control.html

 

"Please rate helpful posts"

 

26
Views
0
Helpful
3
Replies
CreatePlease to create content