Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Static NAT and Network Object Groups

Hi,

Using an ASA, v9.1(3), have configured a static NAT rule that uses a network object group as a destination. The NAT rule is used in a VPN configuration. The group has three IPv4 address members. With some preliminary testing via two users, it is noticed that the ASA chooses one of the group IPs as is expected in a seemingly random manner. In other words, all seems to work.

I would like to know *how* the ASA chooses the IP. Is there a round robin algorithm being used? What about statefulness. Sounds like I'm talking about a load balancer I know and it seem a bit much to expect that functionality. I haven't been able to find documentation on this area. Any advice on this is greatly appreciated.

Thanks,

Mike

Mike Wiseman

University of Toronto 

  • VPN
1 REPLY

Static NAT and Network Object Groups

Hosts are 1-to-1 NAT'd until the pool is exhausted, then they PAT.

http://www.cisco.com/en/US/docs/security/asa/asa91/configuration/firewall/nat_objects.html#wp1534465


114
Views
0
Helpful
1
Replies
This widget could not be displayed.