Avatar of RAMU CH
RAMU CH
Flag for India asked on

Maximum PAT transalations through Cisco ASA 5510 Firewall

Hi,

Here my queries which is killling my mind regularly.Pls help with it

a) What is the Maximum PAT transalations ove ASA 5510 & ASA 5520

b) What is the Maximum Connections is okay over 5510 and 5520 .. Basically what does meant "CONNECTION" in fireall technology

c) I have Patted whole my INSIDE and two DMZ interfaces PATTED with a Interface IP ,which tranalated RAW data ans IPSEC data.. Is it good though in future because all translations are happening over only one IP address

4) Any troubleshoot Documnet about NAT / Accesslists /DMZ zones and security Levels , Connections and transalations etc so that i will read and get expertise in Firewall technologies

Regards
Ramu






Cisco

Avatar of undefined
Last Comment
RAMU CH

8/22/2022 - Mon
Robert Sutton Jr

What type of licenses do you have for both? Base? Sec. Plus?
Feroz Ahmed

Hi,

It is by default one can configure 65535 pat address on a single firewall .PAT is nothing but post address translation.In simple words PAT means it will convert an ip address into another ip address and go outside network if PAT is configured on Firewall and this is possible only if NAT is enabled on firewall.The configuration will be as below :

ASA #Config t
ASA(Conf-t)#Nat-Control
ASA(Conf-t)#Static (inside,outside) w.x.y.z (PAT while going outside the inside ip address) x.x.x.x (real ip Address of inside network)
ASA(Conf-t)#static(DMZ,outside) w.x.y.z  (PAT while going outside the inside ip address) x.x.x.x (real ip Address of DMZ network)
RAMU CH

ASKER
Hi,

Mine is Sec-Plus License

Regards
Ramu
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
RAMU CH

ASKER
Hi,

Pls reply

Regards
Ramu
ASKER CERTIFIED SOLUTION
Ernie Beek

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
RAMU CH

ASKER
Thanks