Question : ASA 8.3 NAT Configuration

I'm trying to wrap my head around 8.3.  Below is a snip of my 8.2 running-config.  I want all inside traffic ( to use the (NAT) range until used up then all overflow to use (PAT)  I also want my dmz1 traffic to use these two as well.  DMZ2 traffic should use (PAT)  How would that look in 8.3 syntax?

global (outside) 1 netmask
global (outside) 1
global (outside) 2 netmask
global (dmz1) 1 interface
global (dmz2) 2 interface
nat (dmz1) 1
nat (dmz2) 2
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1

Answer : ASA 8.3 NAT Configuration

One thing with the new NAT code is that there would be many ways to accomplish the same thing. They have give us this new code so that it is a lot more granular but at the same time until it is worked with it will be much more complicated. So here you go it should be pretty close to what you are looking to do.
Also this document I found to be very helpful while learning this:

object network nat-range1

object network pat-ip1

object-group network nat-pat-grp
network-object object nat-range1
network-object object pat-ip1

object network my_net_inside
nat (inside,outside) dynamic nat-pat-grp interface

this will get your inside talking outbound, using the NAT range first and then overloading to the PAT IP address of

object network my_net_objdmz1
nat (dmz1,outside) dynamic nat-pat-grp interface

object network pat-ip2

object network my_net_objdmz2
nat (dmz2,outside) dynamic interface


Random Solutions  
programming4us programming4us