Licensing requirements for network object nat, Prerequisites for network object nat, Guidelines and limitations – Cisco ASA 5505 User Manual
Page 584
30-2
Cisco ASA 5500 Series Configuration Guide using the CLI
Chapter 30 Configuring Network Object NAT
Licensing Requirements for Network Object NAT
Licensing Requirements for Network Object NAT
The following table shows the licensing requirements for this feature:
Prerequisites for Network Object NAT
Depending on the configuration, you can configure the mapped address inline if desired or you can create
a separate network object or network object group for the mapped address (the object network or
object-group network command). Network object groups are particularly useful for creating a mapped
address pool with discontinous IP address ranges or multiple hosts or subnets. To create a network object
or group, see the
“Configuring Objects and Groups” section on page 13-1
.
For specific guidelines for objects and groups, see the configuration section for the NAT type you want
to configure. See also the
section.
Guidelines and Limitations
Context Mode Guidelines
Supported in single and multiple context mode.
Firewall Mode Guidelines
•
Supported in routed and transparent firewall mode.
•
In transparent mode, you must specify the real and mapped interfaces; you cannot use any.
•
In transparent mode, you cannot configure interface PAT, because the transparent mode interfaces
do not have IP addresses. You also cannot use the management IP address as a mapped address.
IPv6 Guidelines
Does not support IPv6.
Additional Guidelines
•
You can only define a single NAT rule for a given object; if you want to configure multiple NAT
rules for an object, you need to create multiple objects with different names that specify the same
IP address, for example, object network obj-10.10.10.1-01, object network obj-10.10.10.1-02,
and so on.
Model
License Requirement
All models
Base License.