[c-nsp] ASA 8/.3+ Manual NAT firewall syntax - with regards to static VS dynmaic keywords

Nick Cutting ncutting at edgetg.com
Mon May 9 16:07:06 EDT 2016


I have tried many ways to make these work differently:

nat (inside,outside) after-auto source static OBJECT-LAN(s) PUBLIC ADDRESS(s)
nat (inside,outside) after-auto source dynamic OBJECT-LAN(s) PUBLIC ADDRESS(s)

Ive tried one-to-one in the object groups
Ive tried one to many, many to one, and many to many

I cannot make the "source static" and the "source dynamic" behave differently.
The 8.3 NAT documentation does not explain this explicit difference for Manual/twice nat.

Anyone know if there is a difference? 

Note this is for manual nat only, not object / auto nat


More information about the cisco-nsp mailing list