Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

ASA NAT Clarification

Hello All

Please i need to be clear on a point:

is

static(inside,outside) 10.10.10.1 11.11.11.1 netmask 255.255.255.0

the same as

static(outside,inside) 11.11.11.1 10.10.10.1 netmask 255.255.255.0????

1 ACCEPTED SOLUTION

Accepted Solutions
New Member

ASA NAT Clarification

No, they are not same.  The order of a static NAT is:

static (real_interface,mapped_interface) mapped_ip real_ip netmask mask

What you do is: static(more secure network, less secure network).  So you can do any of these:

static(dmz,outside) etc.

static(inside,dmz) etc.

static(inside,outside) etc.

If your case you should do: static(inside address, outside address) 100.100.100.100 192.168.10.1 netmask 255.255.255.255

This will NAT the outside address 100.100.100.100 to the inside address 192.168.10.1.

HTH

1 REPLY
New Member

ASA NAT Clarification

No, they are not same.  The order of a static NAT is:

static (real_interface,mapped_interface) mapped_ip real_ip netmask mask

What you do is: static(more secure network, less secure network).  So you can do any of these:

static(dmz,outside) etc.

static(inside,dmz) etc.

static(inside,outside) etc.

If your case you should do: static(inside address, outside address) 100.100.100.100 192.168.10.1 netmask 255.255.255.255

This will NAT the outside address 100.100.100.100 to the inside address 192.168.10.1.

HTH

430
Views
0
Helpful
1
Replies
CreatePlease to create content