NAT for multiple subnets on Cisco ASA

David Blair
David Blair used Ask the Experts™
on
A router is being added to create somewhat of a DMZ to separate servers from workstations.  Simplified network topology attached.  The existing ASA now must NAT Internet traffic for 10.4.0.0 as well as the newly-created 12.2.0.0 subnet.  It should be noted there are other subnets in the 10.x.x.x range hanging off the ASA.

Here are the NAT commands currently in FWL1:
global (outside) 1 12.1.1.1 netmask 255.255.255.224
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 10.4.0.0 255.255.0.0

Simple but possibly dumb question...  Just add a NAT (inside) 1 10.2.0.0 255.255.0.0?
MAO-NAT-Example.png
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Technical Consultant
Commented:
From a nat perspective yes - don't forget you will still need to to let the traffic through though (assuming you have an access-list applied to the firewalls inside interface).

Pete

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial