cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
537
Views
0
Helpful
1
Replies

nat or pat, which comes first?

yuhuiyao
Level 1
Level 1


All,

I have the following configuration on my ASA:

nat (inside) 1 0.0.0.0 0.0.0.0

global (outside) 1 192.168.1.10-192.168.1.19

I have multiple /24 internal networks. My questions is, when traffic exits from inside to outside, which will come first? NAT or PAT?

Thanks.

1 Reply 1

Jon Marshall
Hall of Fame
Hall of Fame

Static NATs take precedence over dynamic NAT. See this link for full details of NAT processing order -

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/cfgnat.html#wp1042696

note though that your config above is only for dynamic NAT.

Jon

Review Cisco Networking products for a $25 gift card