Cisco ASA Dynamic NAT Configuration

Lessons Discussion
31

Hi Sunil,

These are the pre < 8.3 commands to configure NAT.

Let’s break down these commands:

global (outside) 1 interface
  • global means we configure a global address pool.
  • (outside) means we define the pool on this interface (outside).
  • 1 is the ID of our pool.
  • interface means that we use PAT with the IP address on the interface.
global (guestwifi) 1 interface

Same as above but for the guestwifi interface.

nat (outside) 1 10.10.10.0 255.255.255.0
  • (outside) this is the interface where the NAT network exists. The outside interface in this case.
  • 1 this is how we combine the global pool and this NAT statement together.
  • 10.10.10.0 255.255.255.0 this is the subnet we want to translate.
nat (guestwifi) 1 172.168.20.0 255.255.255.0
nat (inside) 1 10.10.10.0 255.255.255.0
nat (dmz) 1 192.0.2.24 255.255.255.248

These three are pretty much the same as on the one I explained above.

nat (inside) 0 access-list inside_nat0_outbound

This is for NAT exemption. Whatever matches your access-list won’t be translated with NAT.

Hope this helps!

Rene