{"id":707,"date":"2012-09-01T00:00:00","date_gmt":"2012-09-01T00:00:00","guid":{"rendered":"https:\/\/fir3netwp.gmsrrpobkbd.com\/2012\/09\/01\/cisco-asa-twice-nat\/"},"modified":"2021-07-30T13:22:15","modified_gmt":"2021-07-30T13:22:15","slug":"cisco-asa-twice-nat","status":"publish","type":"post","link":"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-twice-nat.html","title":{"rendered":"Cisco ASA – Twice NAT"},"content":{"rendered":"
Twice NAT allows you to NAT both the source and destination within a single rule.<\/p>\n
A scenario where this type of configuration would be required is shown below. To ensure that any traffic originating from the Internet isn’t sent back out to its default gateway (asymmetrically routed) the source IP is translated to an IP within the range of the inside segment (192.168.100.0\/24). In turn ensuring the return traffic is sent back via the the Cisco ASA.<\/p>\n
<\/p>\n
Within this example we will perform both Static PAT along with Dynamic PAT to ensure that traffic to our SMTP (192.168.100.200) server is not asymmetrically routed.<\/p>\n
Here are some more details :<\/p>\n
Below shows the required syntax.<\/p>\n
object network SERVER-33.33.33.33
\nhost 33.33.33.33
\nobject network SERVER-192.168.100.200
\nhost 192.168.100.200
\nobject service SMTP-SERVICE
\nservice tcp destination eq 25
\nobject network PAT-ADDRESS-100
\nhost 192.168.100.100<\/p>\n
nat (outside,inside) 1 source dynamic any PAT-ADDRESS-100 destination static SERVER-33.33.33.33 SERVER-192.168.100.200 service SMTP-SERVICE SMTP-SERVICE<\/p>\n","protected":false},"excerpt":{"rendered":"
Twice NAT allows you to NAT both the source and destination within a single rule. Scenario A scenario where this type of configuration would be required is shown below. To ensure that any traffic originating from the Internet isn’t sent back out to its default gateway (asymmetrically routed) the source IP is translated to an … Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":706,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"yoast_head":"\n