Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

NAT in Transparent Mode


I am trying to figure out why do i need NAT in a transparent firewall mode. What i understood so far from the NAT scenario is, when ASA translates an internal host to a mapped address that is not in the same network as the ASA's outside interface, a static route is needed on the upstream router in order to reach that mapped address. On the other hand, if the mapped address is on the same subnet as the ASA's outside interface, upstream router will ARP the ASA for the host's MAC.

Without NAT scenario:

Assuming that the internal host and ASA have the ARP info. of the gateway.

When ASA receives a packet from an internal host with a destination of web server in the internet, ASA will record the source MAC along with the interface where the packet has arrived and it will forward the packet to the gateway. The gateway will forward the request to the web server. In return traffic, the web server replies to the gateway which in turn forward the reply to the internal host.

Therefore, if the whole game works using just ARP, what NAT is used for?




CreatePlease to create content