Re: Static Nat question on ASA

Dear Fake ,

Please Correct me if i m wrong * ( experts )

It depends on the security level that you are having on the inside and
outside.

In case of static - you dont need to have 2 maping .

usually SL - for inside is 100 and for outside is 0

static(inside,outside) 1.1.1.1 192.168.2.50 mask 255.255.255.255

so this will make 1.1.1.1 IP from Outside to be translated into 192.168.2.50
for inside

And static is mainly used to ""ALLOW traffic from lower SL to Higher SL "".

Although this will also allow for inside to outside maping for these IP's as
well.

Regards,

Nauman

Blogs and organic groups at http://www.ccie.net
Received on Tue May 05 2009 - 08:49:48 ART