Cisco ASA Static NAT Configuration

Lessons Discussion
4

Hi Rene,

Need help again, So its NAT this time.

ASA1(config)# object network WEB_SERVER
ASA1(config-network-object)# host 192.168.1.1
ASA1(config-network-object)# nat (DMZ,OUTSIDE) static 192.168.2.200

Let’s call this statement A.

The configuration above tells the ASA that whenever an outside device connects to IP address 192.168.2.200
that it should be translated to IP address 192.168.1.1.

ASA1(config)# object network DMZ
ASA1(config-network-object)# subnet 192.168.1.0 255.255.255.0
ASA1(config-network-object)# nat (DMZ,OUTSIDE) static PUBLIC_POOL

Let’s call this statement B.

The configuration above tells the ASA to translate any IP address from the subnet DMZ (192.168.1.0 /24) to an
IP address in the PUBLIC_POOL (10.10.10.0 /24).

Both NAT statement`s are similar except one has a IP other has a POOL.

statement-A is performing translation for the inbound traffic
statement-B is performing translation for outbound traffic

My question is what part of command makes ASA to perform translation on INBOUND traffic or OUTBOUND traffic and on which interface.

1 Like