Wednesday, December 5, 2018

ASA 9.8 - Object NAT vs Twice NAT for Static

I suppose this is more of a question of best practice or preference?

Between the two types of NAT a static NAT can be configured in both ways:

TWICE NAT:

object network MYSERVER-INT host 10.24.4.10 object network MYSERVER-NAT host 204.60.0.2 nat (INSIDE,OUTSIDE) source static MYSERVER-INT MYSERVER-NAT 

OBJECT NAT:

object network MYSERVER-INT host 10.24.4.10 object network MYSERVER-PUB host 204.60.0.2 object network MYSERVER-INT nat (INSIDE,OUTSIDE) static MYSERVER-NAT 

I personally like the one line nature of Twice NAT, but I'd like to see differing opinions? Is there a functional difference I haven't noticed? The Cisco docs for static Twice NAT are vague and I haven't found much reason to use one over the other?



No comments:

Post a Comment