{"id":708,"date":"2012-11-03T00:00:00","date_gmt":"2012-11-03T00:00:00","guid":{"rendered":"https:\/\/fir3netwp.gmsrrpobkbd.com\/2012\/11\/03\/cisco-asa-83-nat\/"},"modified":"2023-02-24T08:01:32","modified_gmt":"2023-02-24T08:01:32","slug":"cisco-asa-83-nat","status":"publish","type":"post","link":"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html","title":{"rendered":"Cisco ASA  &#8211; 8.3 and later NAT Tutorial"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_65 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-662ddf1b88ed8\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-662ddf1b88ed8\"  aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\/#Introduction\" title=\"Introduction\">Introduction<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\/#Objects\" title=\"Objects\">Objects<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\/#Example\" title=\"Example\">Example<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\/#Commands\" title=\"Commands\">Commands<\/a><\/li><\/ul><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\/#NAT\" title=\"NAT\">NAT<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\/#Auto_NAT\" title=\"Auto NAT\">Auto NAT<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\/#Manual_NAT\" title=\"Manual NAT\">Manual NAT<\/a><\/li><\/ul><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\/#NAT_Order\" title=\"NAT Order\">NAT Order<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\/#Keywords\" title=\"Keywords\">Keywords<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"h3 section\"><span class=\"ez-toc-section\" id=\"Introduction\"><\/span><span style=\"color: #000000;\"><strong><a><span style=\"color: #000000;\">Introduction<\/span><\/a><\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>ASA 8.3 onwards brought a number of changes in how NAT is processed.<br \/>\nFirst of all NAT is built around <span style=\"text-decoration: underline;\">objects<\/span>, this allows for IP`s to be changed and objects to be renamed much easier than previously.<br \/>\nAlso when configuring ACL`s the <span style=\"text-decoration: underline;\">Real IP\/Port<\/span> address(s) are now used.<\/p>\n<p>Pre 8.3<\/p>\n<p class=\"codemulti\">access-list acl-outside extended permit ip any host 88.88.88.120<\/p>\n<p>After 8.3+<\/p>\n<p class=\"codemulti\">access-list acl-outside extended permit ip any host 172.16.1.220<\/p>\n<p><em>Note :<\/em> In terms of ports. If you are using port redirection then the real port is defined.<\/p>\n<p>Finally <a href=\"https:\/\/www.fir3net.com\/Firewalls\/Cisco\/cisco-asa-security-levels-nat-control.html\">NAT control<\/a> has been removed.<\/p>\n<h2 class=\"h3 section\"><span class=\"ez-toc-section\" id=\"Objects\"><\/span><span style=\"color: #000000;\"><strong><a name=\"obj\"><\/a><span style=\"color: #000000;\">Objects<\/span><\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Unlike object groups, an object is used to define a single item. Objects can then be used within ACL`s, object-groups but most importantly NAT.<br \/>\nThere are 2 main type of objects. These are &#8216;network&#8217; and &#8216;service&#8217;.<\/p>\n<ul>\n<li>network &#8211; host, subnet or IP range<\/li>\n<li>service &#8211; protocol\/port.<\/li>\n<\/ul>\n<h4><span class=\"ez-toc-section\" id=\"Example\"><\/span><span style=\"color: #000000;\"><strong><a><span style=\"color: #000000;\">Example<\/span><\/a><\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p class=\"codemulti\">asa(config)# object network obj-server<br \/>\nasa(config-network-object)# host 192.168.1.100<\/p>\n<h4><span class=\"ez-toc-section\" id=\"Commands\"><\/span><span style=\"color: #000000;\"><strong><a><span style=\"color: #000000;\">Commands<\/span><\/a><\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p><strong>Show<\/strong> &#8211; To show the running configuration objects the command &#8216;show run object&#8217; is used.<br \/>\n<strong>Rename<\/strong> &#8211; To rename an object on the fly the command &#8216;object network VPN-POOL rename RA-POOL&#8217; is used.<strong><br \/>\n<\/strong><\/p>\n<h2 class=\"h3 section\"><span class=\"ez-toc-section\" id=\"NAT\"><\/span><span style=\"color: #000000;\"><strong><a name=\"nat\"><\/a><span style=\"color: #000000;\">NAT<\/span><\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>There are now 2 types of NAT. Auto and Manual NAT.<\/p>\n<ul>\n<li><strong>Auto NAT<\/strong> &#8211; Only the source is used as a match criteria when NAT`ing.<\/li>\n<li><strong>Manual NAT<\/strong> &#8211; The source and destination is used as a match criteria when NAT`ing.<\/li>\n<\/ul>\n<h4><span class=\"ez-toc-section\" id=\"Auto_NAT\"><\/span><span style=\"color: #000000;\"><strong><a><span style=\"color: #000000;\">Auto NAT<\/span><\/a><\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p>Auto NAT only considers the source address when performing NAT. Based on this Auto NAT is only used for Static or Dynamic NAT.<br \/>\nWhen configuring Auto NAT is is configured within an object.<\/p>\n<p><span style=\"color: #000000;\"><strong><a><span style=\"color: #000000;\">Example<\/span><\/a><\/strong><\/span><\/p>\n<p>Below is an example of a static NAT.<\/p>\n<p class=\"codemulti\">asa(config)# object network obj-server<br \/>\nasa(config-network-object)# host <strong><span style=\"color: #ff0000;\">192.168.100.1 &lt;&#8211; REAL IP<\/span><\/strong><br \/>\nasa(config-network-object)# nat (<span style=\"color: #ff0000;\">inside<\/span>,<span style=\"color: #0000ff;\">outside<\/span>) <strong><span style=\"color: #0000ff;\">static 88.88.88.1 &lt;&#8211; MAPPED IP<\/span><\/strong><\/p>\n<p>After configuring this NAT and looking at the configuration we can see the configuration in 2 places ; NAT and object.<\/p>\n<p class=\"codemulti\">asa# show run object<br \/>\nobject network obj-server<br \/>\nhost <span style=\"color: #ff0000;\">192.168.100.1<\/span><\/p>\n<p>asa# show run nat<br \/>\nobject network obj-server<br \/>\nnat (<span style=\"color: #ff0000;\">inside<\/span>,<span style=\"color: #0000ff;\">outside<\/span>) static <span style=\"color: #0000ff;\">88.88.88.1<\/span><\/p>\n<h4><span class=\"ez-toc-section\" id=\"Manual_NAT\"><\/span><span style=\"color: #000000;\"><strong><a><span style=\"color: #000000;\">Manual NAT<\/span><\/a><\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p>Manual NAT considers either only the source or the source and destination address when performing NAT. Manual NAT can be used for (pretty much) all types of NAT i.e NAT exempt, policy NAT etc.<\/p>\n<p>Because Manual NAT can also NAT the source and destination within a single statement it is also known as <a href=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-twice-nat.html\">twice NAT<\/a>.<br \/>\nUnlike Auto NAT which is configured within an object, Manual NAT is configured directly from the global configuration mode. However only objects are used within the Manual NAT rule rather then IP addresses directly.<\/p>\n<p><span style=\"color: #000000;\"><strong><a><span style=\"color: #000000;\">Example<\/span><\/a><\/strong><\/span><\/p>\n<p>Below is an example of static NAT where only the source is considered for NAT. However this is typically done with Auto NAT.<\/p>\n<p class=\"codemulti\">object network obj-server-private<br \/>\nhost <span style=\"color: #ff0000;\">192.168.100.1<\/span><br \/>\nobject network\u00a0obj-server-public<br \/>\nhost <span style=\"color: #0000ff;\">88.88.88.88<\/span><\/p>\n<p>nat (<span style=\"color: #ff0000;\">DMZ<\/span>,<span style=\"color: #0000ff;\">outside<\/span>) source static <span style=\"color: #ff0000;\">obj-server-private<\/span>\u00a0<span style=\"color: #0000ff;\">obj-server-public<\/span><\/p>\n<p>Below shows the syntax is we wanted to consider both the source and destination. This method (twice NAT) is also used for NAT exempt (<a href=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-no-nat-nat-exemption.html\">click here for article<\/a>)<\/p>\n<p class=\"codemulti\">nat (<span style=\"color: #ff0000;\">real_ifc<\/span>,<span style=\"color: #0000ff;\">mapped<\/span><span style=\"color: #0000ff;\">_ifc<\/span>) source static <span style=\"color: #ff0000;\">REAL-SRC<\/span> <span style=\"color: #0000ff;\">MAPPED-SRC<\/span> destination static <span style=\"color: #ff0000;\">REAL-DST<\/span> <span style=\"color: #0000ff;\">MAPPED-DST<\/span><\/p>\n<p><strong>TIP<\/strong> : I always find the best way to read these statements is from the Real Source. So from the REAL-SRC going out to the REAL-IFC. \u00a0To the MAPPED-DST.<\/p>\n<h2 class=\"h3 section\"><span class=\"ez-toc-section\" id=\"NAT_Order\"><\/span><span style=\"color: #000000;\"><strong><a name=\"order\"><\/a><span style=\"color: #000000;\">NAT Order<\/span><\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>NAT is order within 3 sections.<\/p>\n<ul>\n<li>Section 1 \u2013 Manual NAT<\/li>\n<li>Section 2 \u2013 Auto NAT<\/li>\n<li>Section 3 \u2013 Manual Nat After-Auto<\/li>\n<\/ul>\n<p>By default only sections 1 and 2 are used. However should you need to place a manual NAT rule after Auto NAT you can specify the keyword after-auto when configuring a Manual NAT rule to place it within Section 3.<\/p>\n<p class=\"codemulti\">nat (real,mapped) [after-auto] [Line#] &#8230;&#8230;&#8230;<\/p>\n<p>To view the order of precedence the &#8220;show nat&#8221; command is used.<span style=\"color: #000000;\"><strong><br \/>\n<\/strong><\/span><\/p>\n<h2 class=\"h3 section\"><span class=\"ez-toc-section\" id=\"Keywords\"><\/span><span style=\"color: #000000;\"><strong><a name=\"kw\"><\/a><span style=\"color: #000000;\">Keywords<\/span><\/strong><\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Within the AutoNAT \/ Manual NAT statements there are 3 keywords that are useful to know.<\/p>\n<p><strong>unidirectional<\/strong> &#8211; 8.3 Only &#8211; This ensured that the NAT statement was unidirectional. There is a caveat for this where it was added the configuration incorrectly when upgrading to 8.3 (CSCti36048).<br \/>\n<strong>route-lookup<\/strong> &#8211; 8.4(2)+ &#8211; This instructs the ASA to use the routing table for the egress interface rather then the interface defined within the NAT statement (i.e &#8216;nat (inside,outside)&#8230;. rather then use outside the ASA will do a route lookup.)<br \/>\n<strong>no-proxy-arp<\/strong> &#8211; 8.4(2)+ &#8211;\u00a0This disables proxy arp for the mapped IP address within the relevant NAT statement.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Introduction ASA 8.3 onwards brought a number of changes in how NAT is processed. First of all NAT is built around objects, this allows for IP`s to be changed and objects to be renamed much easier than previously. Also when configuring ACL`s the Real IP\/Port address(s) are now used. Pre 8.3 access-list acl-outside extended permit &#8230; <a title=\"Cisco ASA  &#8211; 8.3 and later NAT Tutorial\" class=\"read-more\" href=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\" aria-label=\"Read more about Cisco ASA  &#8211; 8.3 and later NAT Tutorial\">Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Cisco ASA - 8.3 and later NAT Tutorial - Fir3net<\/title>\n<meta name=\"description\" content=\"Introduction ASA 8.3 onwards brought a number of changes in how NAT is processed. First of all NAT is built around objects, this allows for IP`s to be\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cisco ASA - 8.3 and later NAT Tutorial - Fir3net\" \/>\n<meta property=\"og:description\" content=\"Introduction ASA 8.3 onwards brought a number of changes in how NAT is processed. First of all NAT is built around objects, this allows for IP`s to be\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\" \/>\n<meta property=\"og:site_name\" content=\"Fir3net\" \/>\n<meta property=\"article:published_time\" content=\"2012-11-03T00:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-02-24T08:01:32+00:00\" \/>\n<meta name=\"author\" content=\"Rick Donato\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Rick Donato\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\"},\"author\":{\"name\":\"Rick Donato\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037\"},\"headline\":\"Cisco ASA &#8211; 8.3 and later NAT Tutorial\",\"datePublished\":\"2012-11-03T00:00:00+00:00\",\"dateModified\":\"2023-02-24T08:01:32+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\"},\"wordCount\":708,\"publisher\":{\"@id\":\"https:\/\/www.fir3net.com\/#organization\"},\"articleSection\":[\"Cisco Firewalls\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\",\"url\":\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\",\"name\":\"Cisco ASA - 8.3 and later NAT Tutorial - Fir3net\",\"isPartOf\":{\"@id\":\"https:\/\/www.fir3net.com\/#website\"},\"datePublished\":\"2012-11-03T00:00:00+00:00\",\"dateModified\":\"2023-02-24T08:01:32+00:00\",\"description\":\"Introduction ASA 8.3 onwards brought a number of changes in how NAT is processed. First of all NAT is built around objects, this allows for IP`s to be\",\"breadcrumb\":{\"@id\":\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.fir3net.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\/\/www.fir3net.com\/security\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Firewalls\",\"item\":\"https:\/\/www.fir3net.com\/security\/firewalls\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Cisco Firewalls\",\"item\":\"https:\/\/www.fir3net.com\/security\/firewalls\/cisco\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"Cisco ASA &#8211; 8.3 and later NAT Tutorial\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.fir3net.com\/#website\",\"url\":\"https:\/\/www.fir3net.com\/\",\"name\":\"Fir3net\",\"description\":\"Keeping you in the know\",\"publisher\":{\"@id\":\"https:\/\/www.fir3net.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.fir3net.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.fir3net.com\/#organization\",\"name\":\"Fir3net\",\"url\":\"https:\/\/www.fir3net.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png\",\"contentUrl\":\"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png\",\"width\":390,\"height\":88,\"caption\":\"Fir3net\"},\"image\":{\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037\",\"name\":\"Rick Donato\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.fir3net.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g\",\"caption\":\"Rick Donato\"},\"description\":\"Rick Donato is a Network Automation Architect\/Evangelist and the founder of Packet Coders.\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cisco ASA - 8.3 and later NAT Tutorial - Fir3net","description":"Introduction ASA 8.3 onwards brought a number of changes in how NAT is processed. First of all NAT is built around objects, this allows for IP`s to be","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html","og_locale":"en_US","og_type":"article","og_title":"Cisco ASA - 8.3 and later NAT Tutorial - Fir3net","og_description":"Introduction ASA 8.3 onwards brought a number of changes in how NAT is processed. First of all NAT is built around objects, this allows for IP`s to be","og_url":"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html","og_site_name":"Fir3net","article_published_time":"2012-11-03T00:00:00+00:00","article_modified_time":"2023-02-24T08:01:32+00:00","author":"Rick Donato","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Rick Donato","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html#article","isPartOf":{"@id":"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html"},"author":{"name":"Rick Donato","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037"},"headline":"Cisco ASA &#8211; 8.3 and later NAT Tutorial","datePublished":"2012-11-03T00:00:00+00:00","dateModified":"2023-02-24T08:01:32+00:00","mainEntityOfPage":{"@id":"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html"},"wordCount":708,"publisher":{"@id":"https:\/\/www.fir3net.com\/#organization"},"articleSection":["Cisco Firewalls"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html","url":"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html","name":"Cisco ASA - 8.3 and later NAT Tutorial - Fir3net","isPartOf":{"@id":"https:\/\/www.fir3net.com\/#website"},"datePublished":"2012-11-03T00:00:00+00:00","dateModified":"2023-02-24T08:01:32+00:00","description":"Introduction ASA 8.3 onwards brought a number of changes in how NAT is processed. First of all NAT is built around objects, this allows for IP`s to be","breadcrumb":{"@id":"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.fir3net.com\/Cisco-ASA\/cisco-asa-83-nat.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.fir3net.com\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.fir3net.com\/security"},{"@type":"ListItem","position":3,"name":"Firewalls","item":"https:\/\/www.fir3net.com\/security\/firewalls"},{"@type":"ListItem","position":4,"name":"Cisco Firewalls","item":"https:\/\/www.fir3net.com\/security\/firewalls\/cisco"},{"@type":"ListItem","position":5,"name":"Cisco ASA &#8211; 8.3 and later NAT Tutorial"}]},{"@type":"WebSite","@id":"https:\/\/www.fir3net.com\/#website","url":"https:\/\/www.fir3net.com\/","name":"Fir3net","description":"Keeping you in the know","publisher":{"@id":"https:\/\/www.fir3net.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.fir3net.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.fir3net.com\/#organization","name":"Fir3net","url":"https:\/\/www.fir3net.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png","contentUrl":"https:\/\/www.fir3net.com\/wp-content\/uploads\/Fir3net-Background-Logo-compressed.png","width":390,"height":88,"caption":"Fir3net"},"image":{"@id":"https:\/\/www.fir3net.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/ab35009601b7687ee1c5310be6038037","name":"Rick Donato","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.fir3net.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d75d69a54c0ca3b32c24c3a9703b623c?s=96&d=mm&r=g","caption":"Rick Donato"},"description":"Rick Donato is a Network Automation Architect\/Evangelist and the founder of Packet Coders."}]}},"_links":{"self":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/708"}],"collection":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/comments?post=708"}],"version-history":[{"count":1,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/708\/revisions"}],"predecessor-version":[{"id":3640,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/posts\/708\/revisions\/3640"}],"wp:attachment":[{"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/media?parent=708"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/categories?post=708"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fir3net.com\/wp-json\/wp\/v2\/tags?post=708"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}