Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Question about static identity nat when migrating ASA from pre-8.3 to 8.3

I have looked over the documentation for the ASA 8.3 migration and there is still something I have not been able to determine. 

The page http://www.cisco.com/en/US/docs/security/asa/asa83/upgrading/migrating.pdf states that "Static identity NAT is treated like any other static command, and is converted depending on whether it is regular or policy NAT"

For static identity nats, I assume that means that the auto-migration tool should convert this:

static (inside,outside) 10.1.1.6 10.1.1.6 netmask 255.255.255.255

to this:

object network obj-10.1.1.6
host 10.1.1.6
nat (inside,outside) static 10.1.1.6

***However***, will it also automatically convert this

static (inside,outside) 10.1.1.0 10.1.1.0 netmask 255.255.255.0

to this? :


object network obj-10.1.1.0
network 10.1.1.0 255.255.255.0
nat (inside,outside) static 10.1.1.0 255.255.255.0


and will it work the same way?

Thanks,

-Mathew

1 ACCEPTED SOLUTION

Accepted Solutions
Red

Question about static identity nat when migrating ASA from pre-8

Hi Mat,

Yes that's right, you've got the correct nat translations after upgrading.

You can refer to this doc as well:

https://supportforums.cisco.com/docs/DOC-9129#comment-3934

Hope that helps,

Thanks,

Varun

Thanks, Varun Rao Security Team, Cisco TAC
2 REPLIES
Red

Question about static identity nat when migrating ASA from pre-8

Hi Mat,

Yes that's right, you've got the correct nat translations after upgrading.

You can refer to this doc as well:

https://supportforums.cisco.com/docs/DOC-9129#comment-3934

Hope that helps,

Thanks,

Varun

Thanks, Varun Rao Security Team, Cisco TAC
New Member

Question about static identity nat when migrating ASA from pre-8

Thanks for the answer and the link.

-Mathew

389
Views
0
Helpful
2
Replies