Which Cisco ASA CLI nat command is generated based on this Cisco ASDM NAT configuration?

Refer to the exhibit.

Which Cisco ASA CLI nat command is generated based on this Cisco ASDM NAT configuration?

Refer to the exhibit.

Which Cisco ASA CLI nat command is generated based on this Cisco ASDM NAT configuration?

A.
nat (dmz, outside) 1 source static any any

B.
nat (dmz, outside) 1 source static any outside

C.
nat (dmz,outside) 1 source dynamic any interface

D.
nat (dmz, outside) 1 source dynamic any interface destination dynamic outside outside

E.
nat (dmz, outside) 1 source static any interface destination static any any

F.
nat (dmz, outside) 1 source dynamic any outside destination static any any

Explanation:
Pretty straight forward – like this example
http://tunnelsup.com/2011/06/24/nat-for-cisco-asas-version-8-3/
Regular Dynamic PAT
To create a many-to-one NAT where the entire inside network is getting PAT’d to a single outside
IP do the following.

Old 8.2 command:
nat (inside) 1 10.0.0.0 255.255.255.0
global (outside) 1 interface
New 8.3 equivalent command:
object network inside-net subnet 10.0.0.0 255.255.255.0
nat (inside, outside) dynamic interface
Note: the “interface” command is the 2nd interface in the nat statement, in this case the outside.



Leave a Reply 0

Your email address will not be published. Required fields are marked *