MicroNugget: How to Use NAT and Auto-NAT on ASA 8.3 and 8.4

In this video, Keith Barker covers NAT on ASA v8.3 and higher. Keith manually demonstrates configuring auto (or object) NAT, manual NAT and the three sections in the NAT table: manual NAT in first position, auto NAT in second, and then manual NAT that's been pushed to third.

Let's say you want to automatically apply NAT to outbound traffic using a pool of available IP addresses — but sometimes you need a specific device to have a certain IP address when going to an exact destination. With ASA in v8.3 and higher, you can apply automatic or custom NAT configurations and have them get applied in the order you want. Watch Keith configure Auto (also called "Object") NAT on a network device. Then he overrides that rule with a Manual NAT rule. Last, he moves that Manual NAT rule behind the Auto NAT rule. And there you have the three sections in the NAT table: manual rules, automatic rules, and manual rules configured to be applied last.

Start learning with CBT Nuggets:

[KeithBarker]

Thanks for the feedback Chirag!

Glad you liked the video.

Best wishes,

Keith

[KeithBarker]

The CCNA Security has the following publicly posted objective from Cisco:

Implement the Cisco Adaptive Security Appliance (ASA)
Implement Network Address Translation (NAT) and Port Address Translation (PAT)

As a result, the NAT on the ASA 8.3 and higher (as shown in the video) is certainly something that is expected by Cisco.

Thanks for the question!

Keith Barker

[ChiragRao]

Very useful information. Without this, the NAT menu at first is confusing. Thanks. Keep it coming.

[KeithBarker]

Yes- The official ASA configuration guides (free on Cisco's site) has the CLI commands, organized by task if you want to study just the CLI. In the ASA CBT Series, I intended to show the GUI, as well as look at the preview (CLI equivalent commands) for each of the tasks (before sending the config changes), and that way the learner can see both.

Thank you for the feedback,

Keith.

[fooyungegg]

It is very pro explanation in details. I like it.

Thank you very much!

[neumei]

Keith I have a question. I LOVE the way you teach, but why so much ASDM in the ASA CBT series? Seems to be about 95% ASDM. I learn much better through the CLI vs memorizing menu systems I'll never use. Is there a good resource I could use for strictly learning the ASA via CLI?

[neumei]

Thanks for the reply Keith! Ok great I will look into that. I don't mean to complain, you have taught me so much about cisco R&S (I'm a CCNP), and I have been able to implement it in at the hospital enterprise I work for. The CLI previews help alot, but it's just hard trying to learn through the gui, I feel it almost moves what little ASA knowledge I have backwards.

[tusharnaik]

keith your all videos are fabbbb..can you please explain nat exemption with example.

[tusharnaik]

Hi Keith kindly show us what is difference between static nat and one to one nat.

[MrSioneTuakalau]

Hi Keith, you able to do a video of how you set up your lab for CCNA 640-554? Kinda new to using ASA

[RyanLindfield]

"My hands will never leave my arms!" you're hilarious.. heheh.

[ZoZo-gsss]

This is interesting and very important information for mee so:
You could talk a little faster ? Prehabs 300 werbs per sec or higher ?
Thnx !!

[LalGebi]

Thanks ..Can anybody tell this video is part of which Certification course mentioned in CBT nugget site ?

[JelekGamboa]

Hi Keith, do you have any other video where you configure two ports on an ASA5510 or so with 2 different inside networks to go out one outside interface or two inside and tow outside routing one inside to one outside and the other inside to the remaining outside?

thanks

[obione]

pls keith is this part of the new CCNA Security syllabus 640-554