Comments on: Access Lists and NAT on Cisco ASA Firewalls. Some Clarifications http://www.tech21century.com/access-lists-and-nat-on-cisco-asa-firewalls-some-clarifications/ Technology in the 21st Century Mon, 06 Feb 2012 17:21:56 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: BlogAdmin http://www.tech21century.com/access-lists-and-nat-on-cisco-asa-firewalls-some-clarifications/comment-page-1/#comment-10072 BlogAdmin Sun, 06 Mar 2011 19:43:16 +0000 http://www.tech21century.com/?p=236#comment-10072 If you are doing dynamic NAT (using "nat" and "global" commands), then only traffic initiated from inside will be nated. If you are doing static NAT (one to one static mapping), then both traffic initiated from inside and outside will be nated accordingly. If you are doing dynamic NAT (using “nat” and “global” commands), then only traffic initiated from inside will be nated. If you are doing static NAT (one to one static mapping), then both traffic initiated from inside and outside will be nated accordingly.

]]> By: vikram http://www.tech21century.com/access-lists-and-nat-on-cisco-asa-firewalls-some-clarifications/comment-page-1/#comment-10051 vikram Sun, 06 Mar 2011 03:28:15 +0000 http://www.tech21century.com/?p=236#comment-10051 I have inside to ouside nat. I am allowing ping, traceroute from outside to inside. All I would need is access-list. My query is that when we just have a nat from inside to outside. And then when we ping/traceroute from outside to inside, does it get natted? Or is it just the traffic INITIATED from inside that gets natted? If even a reply from inside gets natted, doesn't it break the connection since its coming from an IP it was not destined for in the first place. I have inside to ouside nat. I am allowing ping, traceroute from outside to inside. All I would need is access-list.

My query is that when we just have a nat from inside to outside. And then when we ping/traceroute from outside to inside, does it get natted? Or is it just the traffic INITIATED from inside that gets natted? If even a reply from inside gets natted, doesn’t it break the connection since its coming from an IP it was not destined for in the first place.

]]>