Avatar of SvenIA
SvenIA
Flag for Netherlands asked on

Cisco ASA5520 understanding NAT rules

Hi Experts,

I have some questions about NAT rules. I have a running config of an ASA5520 with some NAT rules i'm trying to understand. I hope that someone can explain the following NAT rules to me.

First of all, in some rules I see the number 0, 1 or 2 comming back all the time. What does this number mean? And what does the global mean?

global (outside) 2 192.168.80.1-192.168.80.254 netmask 255.255.255.0
global (outside) 1 interface
nat (inside) 0 access-list NONAT


Second I see some access-group commands in front of an access list. What does this mean?

access-group OUTSIDE_ACCESS_IN in interface outside
access-group INSIDE_ACCESS_IN in interface inside


Thanks in advance!
Cisco

Avatar of undefined
Last Comment
SvenIA

8/22/2022 - Mon
SOLUTION
sb1mpo

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
SvenIA

ASKER
Yeah that does help. So if I understand it well, several nat rules with number 1 belong together? Like,

nat (inside) 1 S011 255.255.255.255
nat (inside) 1 S014 255.255.255.255
nat (inside) 1 C001 255.255.255.255
nat (inside) 1 DC1-WS03 255.255.255.255
nat (inside) 1 Server_data_lan 255.255.255.0
nat (inside) 1 132.147.192.0 255.255.192.0
nat (inside) 1 10.0.0.0 255.0.0.0
nat (ASA-ISA) 1 S013-outside 255.255.255.25
ASKER CERTIFIED SOLUTION
hitsotntd

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
SOLUTION
Log in to continue reading
Log In
Sign up - Free for 7 days
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
SvenIA

ASKER
You guys are the best! Very helpfull explinations, thank you very much!
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy