Question : New Cisco NAT commands in 8.3

Hi Guys,

I am installing a Cisco ASA5510 at a customers site which has IOS ver 8.3.1 installed. I am having a problem with the old pre 8.3 nat commands. I have googled around and not really found what I want, ie a old to new conversion chart.

Here are the old commands, and the errors:

HS-ASA01(config)# global (outside) 1 interface
ERROR: This syntax of nat command has been deprecated.
Please refer to "help nat" command for more details.
HS-ASA01(config)# nat (inside) 0 access-list nonat
ERROR: This syntax of nat command has been deprecated.
Please refer to "help nat" command for more details.
HS-ASA01(config)# nat (inside) 1 0.0.0.0 0.0.0.0
ERROR: This syntax of nat command has been deprecated.
Please refer to "help nat" command for more details.

Any help would be appreciated.

Kevin

Answer : New Cisco NAT commands in 8.3

They KEY thing is that the global NAT statements DO NOT exist anymore....

Here are some examples of the new ones....

Existing on 8.2

****NAT across tunnel****

access-list inside_nat0_outbound extended permit ip 10.0.8.0 255.255.255.0 172.16.20.0 255.255.255.0

nat (inside) 0 access-list inside_nat0_outbound

New on 8.3

object network obj-10.0.8.0
   subnet 10.0.8.0 255.255.255.0

object network obj-172.16.20.0
   subnet 172.16.20.0 255.255.255.0

nat (inside,any) source static obj-10.0.8.0 obj-10.0.8.0 destination static obj-172.16.20.0 obj-172.16.20.0

Existing on 8.2

****1 external IP to many internal****

nat (inside) 1 0 0
global (outside) 1 interface


New on 8.3

object network obj_any
nat (inside,outside) dynamic interface