I am working on converting some PIX rules to ASA 8.6 syntax. Do the following achieve the goal?
- outside's IP address is 220.127.116.11/29
- The outside IP address I want things translated to is 18.104.22.168
I want to NAT only 10.1.99.240/28 and 10.1.100.0/24 on the inside to the outside to be NATed and overload
nat(inside,outside) source dynamic NAT_INSIDE_OUTSIDE NAT_OUTSIDE_IP_ADDRESS object-group network NAT_OUTSIDE_IP_ADDRESS network-object host 22.214.171.124 object-group network NAT_INSIDE_OUTSIDE network-object 10.1.99.240 255.255.255.240 network-object 10.1.100.0 255.255.255.0
The PIX configureation had something about no_nat. I am not sure what this was about:
nat (inside) 0 access-list inside_nat0_outbound
This basically contained a list of things that were not NATed out. With the new configuration there is no way to specify this so can I safely assume that things that are not in my NAT_INSIDE_OUTSIDE object group won't be NATed??