Bit confused from the show x-late command output.
Dynamic NAT NAT(inside,outside)
ASA1# show xlate NAT from INSIDE:192.168.1.1 to OUTSIDE:192.168.2.166 flags i idle 0:00:33 timeout 3:00:0
With the above configuration, i can understand that the traffic is initiated on INSIDE interface that’s why it’s showing in the show-xlate output:
NAT FROM INSIDE : 192.168.1.1 to OUTSIDE 192.168.2.166
And now looking at port-forwarding:
show xlate 2 in use, 3 most used Flags: D - DNS, e - extended, I - identity, i - dynamic, r - portmap, s - static, T - twice, N - net-to-net TCP PAT from DMZ:192.168.3.1 80-80 to OUTSIDE:192.168.2.254 80-80 flags sr idle 0:02:20 timeout 0:00:00 TCP PAT from DMZ:192.168.3.3 22-22 to OUTSIDE:192.168.2.254 10022-10022
The connection is initiated from outside trying to access the internal service on a server but still in Xlate shows:
TCP PAT from DMZ:192.168.3.1 80-80 to OUTSIDE:192.168.2.254 80-80
Is this hard coded - whether or not the connection is initiated from outside will it always shows the same in port forwarding?
Please explain the inverse variation in the values between these two.