Question : ASA 8.3 NAT Configuration

I'm trying to wrap my head around 8.3.  Below is a snip of my 8.2 running-config.  I want all inside traffic (10.0.0.0) to use the (NAT) 182.111.111.51-239 range until used up then all overflow to use (PAT) 182.111.111.240.  I also want my dmz1 traffic to use these two as well.  DMZ2 traffic should use (PAT) 182.111.111.241.  How would that look in 8.3 syntax?

global (outside) 1 182.111.111.51-182.111.111.239 netmask 255.255.0.0
global (outside) 1 182.111.111.240
global (outside) 2 182.111.111.241 netmask 255.255.0.0
global (dmz1) 1 interface
global (dmz2) 2 interface
nat (dmz1) 1 172.16.0.0 255.255.255.0
nat (dmz2) 2 172.27.0.0 255.255.255.0
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 10.0.0.0 255.255.0.0

Answer : ASA 8.3 NAT Configuration

One thing with the new NAT code is that there would be many ways to accomplish the same thing. They have give us this new code so that it is a lot more granular but at the same time until it is worked with it will be much more complicated. So here you go it should be pretty close to what you are looking to do.
Also this document I found to be very helpful while learning this:
https://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/nat_objects.html

object network nat-range1
range 182.111.111.51 182.111.111.239

object network pat-ip1
host 182.111.111.240

object-group network nat-pat-grp
network-object object nat-range1
network-object object pat-ip1


object network my_net_inside
subnet 10.0.0.0 255.255.0.0
nat (inside,outside) dynamic nat-pat-grp interface

this will get your inside talking outbound, using the NAT range first and then overloading to the PAT IP address of 182.111.111.240.

object network my_net_objdmz1
subnet 172.16.0.0 255.255.255.0
nat (dmz1,outside) dynamic nat-pat-grp interface

object network pat-ip2
host 182.111.111.241

object network my_net_objdmz2
subnet 172.27.0.0 255.255.255.0
nat (dmz2,outside) dynamic interface

Regards,

3nerds
Random Solutions  
 
programming4us programming4us