Configuring Network Address Translation (NAT) | Cisco ASA Firewalls

Configuring Network Address Translation (NAT) | Cisco ASA Firewalls
By popular demand, here is the live config and explanation of Network Address Translation (NAT) on the Cisco ASA Firewall.

We’re approaching this by using a lab, built in VIRL. This is based on the lab we used in the ACL video. If you’re a Patreon supporter you can download this lab in VIRL, GNS3, or just the config files (link below).

We’ve created a more realistic scenario, where we need public IP addresses to reach the internet. There’s a few things that we need to configure now; We need an IP for general internet access (dynamic NAT, using PAT or a PAT pool), We also need a static NAT, so devices on the internet can reach the intranet server.

In addition, we want to consider how DNS will work, now that there will be different IP addresses on the Inside, DMZ, and Outside areas.

There are some concepts we’ll cover as well. These include Object NAT and Twice NAT, and how they apply in different sections to create NAT policies.

Another concept is real addresses (the original address) and mapped addresses (the translated address). In addition, we need to consider unidirectional NAT and bidirectional NAT. Not to mention talking about source NAT and destination NAT.


Lab: https://networkdirection.net/labsandq...

Patreon information: https://networkdirection.net/patreon/

ASA Clustering:    • ASA Firewalls | High Availability wit...  


Cisco ASA: All-in-one Next-Generation Firewall, IPS, and VPN Services (affiliate): https://click.linksynergy.com/link?id...


Overview of this video:

0:00 Introduction

0:21 Lab Setup

2:17 ASA’s Viewpoint of NAT

4:34 Static NAT

7:02 Dynamic NAT

12:47 Rule Order

16:40 Static Port Translation

18:28 Identity NAT

20:57 DNS Rewrite


LET'S CONNECT

🌏    / networkdirection  

🌏   / netwrkdirection  

🌏   / networkdirection  

🌏 https://www.networkdirection.net

#NetworkDirection