Thursday, April 8, 2021

Twice Identity NAT

Hello everyone.

We are implementing a security solution to our client, who at the moment has no netwroking staff, their guy retired just two days from the start of our project.

The problem for me is some NAT rules on clien'ts CISCO ASA:

object network HQ

subnet 192.168.0.0 255.255.0.0

object network BD_VC

subnet 192.168.125.0 255.255.255.0

object network BD_SIP

subnet 172.16.49.0 255.255.255.0

object-group network DM_INLINE

network-object object BD_SIP

network-object object BD_VC

nat (inside,outside) source static GO GO destination static DM_INLINE DM_INLINE no-proxy-arp route-lookup

And this is just one of the 80 same NAT configurationg for different branches on the HQ CISCO ASA. I just can't comprehend the purpose of what is going on here. Can someone explain the meaning or use-case of this identical real to mapped translations?



No comments:

Post a Comment