We're Sorry, Full Content Access is for Members Only...

If you like to keep on reading, Become a Member Now! Here is Why:

  • Learn any CCNA, CCNP and CCIE R&S Topic. Explained As Simple As Possible.
  • [geot exclude_region="No Trial" ] Try for Just $1. The Best Dollar You've Ever Spent on Your Cisco Career![/geot]
  • Full Access to our 541 Lessons. More Lessons Added Every Week!
  • Content created by Rene Molenaar (CCIE #41726)


303 New Members signed up the last 30 days!


100% Satisfaction Guaranteed!
You may cancel your monthly membership at any time.
No Questions Asked!


Notable Replies

  1. pbyrne says:

    Excellent article Rene, have Cisco included the no-proxy-arp as implied on nat statements in the 9.x code ?

    this seemed to cause problems on 8.3 code with the Asa Arping for the internal web/mail server


  2. Hi Sinan,

    Glad to hear you like it. I probably won't do this example for 8.2 as it might take some time and 8.2 is pretty old by now.


  3. Hi Rene,

    I have the following NAT Rule and I've broken it down the way you did in your example:

    nat (Outside,Outside) source static MITH-PROD_1 NAT_MIRTH_PROD_1 destination static RWJBH_Rawway_NAT RWJBH_NewBrunswick

    • (Outside,Outside): we are translating traffic from the outside that is going to the outside, this is the hairpinning part/u turn nat.
    • source static MIRTH-PROD_1 NAT_MIRTH_PROD_1 the source of the traffic has to be host and it has to be translated to the IP address of, this will be
    • destination static RWJBH_RAAY_NAT RWJBH_NEWBRUNSWICK: the destination of the traffic is and it has to be translated to customers real addresses.

    The part I'm having a little confusion on is the destination part. Can you help clear this portion up in a simple way that is easy to understand?


  4. mismatch configuration -

    just to be sure that i understand what i am reading i think there is a mismatch between the diagram and configuration . instead of the address it has to be in the diagram and i think in the configuration the object network WEB_SERVER it has to be WEB_LOCAL where there is the static nat for INBOUND TRAFFIC .
    Please if i am wrong let me know , Many thanks

  5. Hello Dionisis

    Good catch! You are correct. I will let @ReneMolenaar know of the error and he can fix it.

    Thanks again!


Continue the discussion forum.networklessons.com

9 more replies