NAT on Cisco ASA

HI

I have to nat entries on my asa firewall.

Nat (inside,outside) source static pc_01 interface
Nat (inside,outside) source static pc_02

Object network pc_01
host 192.168.1.1
Object network pc_02
host 192.168.1.2

Only one nat entire works at a time basically the first entry.
How can I make both work?
ciscosuppAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
ffleismaConnect With a Mentor Senior Network EngineerCommented:
yes it means, only both 192.168.1.1 and 192.168.1.2 are NATed to the ouside interface IP.

If you need the entire subnet 192.168.1.x/24, it would look something like this.

object network obj_192.168.1.0-24
 subnet 192.168.1.0 255.255.255.0

nat (inside,outside) source dynamic obj_192.168.1.0-24 interface

let me know if this helps or if you need something different.
0
 
ffleismaSenior Network EngineerCommented:
basically you are statically NATing pc_01 to outside interface IP, which is one is to one NAT translation. that is why the second one is not working. use dynamic NAT

Try the following:

no nat (inside,outside) source static pc_01 interface
no nat (inside,outside) source static pc_02

nat (inside,outside) source dynamic pc_01 interface
nat (inside,outside) source dynamic pc_02 interface
0
 
ciscosuppAuthor Commented:
Thanks it works but does the Nat statement still mean only 192.168.1.1 and 192.168.1.2 is nated to outside. Please advice
0
 
ciscosuppAuthor Commented:
thanks perfect :-)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.