Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

NAT example - Increased Security?

Came across an unusual example of NAT in an ASA recently, difficult to explain but it looked like it was doing a double NAT.

E.g.

Outside IP 222.222.222.222
Mail server 192.168.1.10 (real IP)


In the config there were standard nat rules which translated the destination/outside IP to other IPs (one-many), however the IP it was translated to was for example 172.16.1.10

There was then another nat rule which translated the whole subnet 172.16.1.x to 192.168.1.x, the access list obviously reflected access from the outside to the translated IP 172.16.1.10

The guy which configured it seemed to make out it increased security as it masked the internal IP range, just wondered what other peoples opinions are as it seems pointless to me - the dst and source nat rules surely hide the internal ip scheme anyway??

Thanks in advanced

Everyone's tags (2)
1 REPLY
Cisco Employee

Re: NAT example - Increased Security?

Hey,

That's interesting. I want to reserve my comments unless i am able to have a look at the example in entirety. Please share the link for that. If it is indeed implementing double NAT, it does not work.

Thanks and Regards,

Prapanch

388
Views
0
Helpful
1
Replies