ASA8.3 nat配置与以前版本对比

StaticNAT/PATPre-8.3NAT8.3NATRegularStaticNATstatic(inside,outside)192.168.100.10010.1.1.6netmask255.255.255.255objectnetworkobj-10.1.1.6host10.1.1.6nat(inside,outside)static192.168.100.100RegularStaticPATstatic(inside,outside)tcp192.168.100.1008010.1.1.168080netmask255.255.255.255objectnetworkobj-10.1.1.16host10.1.1.16nat(inside,outside)static192.168.100.100servicetcp8080(inside,outside)192.168.100.100access-listNET1objectnetworkobj-10.1.2.27host10.1.2.27objectnetworkobj-192.168.100.100host192.168.100.100objectnetworkobj-10.76.5.0subnet10.76.5.0255.255.255.224nat(inside,outside)sourcestaticobj-10.1.2.27obj-192.168.100.100destinationstaticobj-10.76.5.0obj-10.76.5.0DynamicNAT/PATPre-8.3NAT8.3NATRegularDynamicPATnat(inside)1192.168.1.0255.255.255.0nat(dmz)110.1.1.0255.255.255.0global(outside)1192.168.100.100objectnetworkobj-192.168.1.0subnet192.168.1.0255.255.255.0nat(inside,outside)dynamic192.168.100.100objectnetworkobj-10.1.1.0subnet10.1.1.0255.255.255.0nat(dmz,outside)dynamic192.168.100.100RegularDynamicPATnat(inside)110.1.2.0255.255.255.0global(outside)1192.168.100.100global(dmz)1192.168.1.1objectnetworkobj-10.1.2.0subnet10.1.2.0255.255.255.0nat(inside,outside)dynamic192.168.100.100objectnetworkobj-10.1.2.0-01subnet10.1.2.0255.255.255.0nat(inside,dmz)dynamic192.168.1.1RegularDynamicPAT-3nat(inside)100global(outside)1interfaceobjectnetworkobj_anysubnet0.0.0.00.0.0.0nat(inside,outside)dynamicinterfaceDynamicPolicyNATobject-groupnetworkog-net-srcnetwork-object192.168.1.0255.255.255.0network-object192.168.2.0255.255.255.0object-groupnetworkog-net-dstnetwork-object192.168.200.0255.255.255.0object-groupserviceog-ser-srcservice-objecttcpgt2000service-objecttcpeq1500access-listNET6extendedpermitobject-groupog-ser-srcobject-groupog-net-srcobject-groupog-net-dstnat(inside)10access-listNET6global(outside)10192.168.100.100objectnetworkobj-192.168.100.100host192.168.100.100objectserviceobj-tcp-range-2001-65535servicetcpdestinationrange200165535objectserviceobj-tcp-eq-1500servicetcpdestinationeq1500nat(inside,outside)sourcedynamicog-net-srcobj-192.168.100.100destinationstaticog-net-dstog-net-dstserviceobj-tcp-range-2001-65535obj-tcp-range-2001-65535nat(inside,outside)sourcedynamicog-net-srcobj-192.168.100.100destinationstaticog-net-dstog-net-dstserviceobj-tcp-eq-1500obj-tcp-eq-1500(withmultipleACEs)access-listACL_NATpermitip172.29.0.0255.255.0.0192.168.1.0255.255.255.0access-listACL_NATpermitip172.29.0.0255.255.0.0192.168.2.0255.255.255.0access-listACL_NATpermitip172.29.0.0255.255.0.0192.168.3.0255.255.255.0access-listACL_NATpermitip172.29.0.0255.255.0.0192.168.4.0255.255.255.0nat(inside)1access-listACL_NATglobal(outside)1192.168.100.100objectnetworkobj-172.29.0.0subnet172.29.0.0255.255.0.0objectnetworkobj-192.168.100.100host192.168.100.100objectnetworkobj-192.168.1.0subnet192.168.1.0255.255.255.0objectnetworkobj-192.168.2.0subnet192.168.2.0255.255.255.0objectnetworkobj-192.168.3.0subnet192.168.3.0255.255.255.0objectnetworkobj-192.168.4.0subnet192.168.4.0255.255.255.0nat(inside,outside)sourcedynamicobj-172.29.0.0obj-192.168.100.100destinationstaticobj-192.168.1.0obj-192.168.1.0nat(inside,outside)sourcedynamicobj-172.29.0.0obj-192.168.100.100destinationstaticobj-192.168.2.0obj-192.168.2.0nat(inside,outside)sourcedynamicobj-172.29.0.0obj-192.168.100.100destinationstaticobj-192.168.3.0obj-192.168.3.0nat(inside,outside)sourcedynamicobj-172.29.0.0obj-192.168.100.100destinationstaticobj-192.168.4.0obj-192.168.4.0OutsideNATglobal(inside)110.1.2.30-1-10.1.2.40nat(dmz)110.1.1.0255.255.255.0outsidestatic(inside,dmz)10.1.1.510.1.2.27netmask255.255.255.255objectnetworkobj-10.1.2.27host10.1.2.27nat(inside,dmz)static10.1.1.5objectnetworkobj-10.1.1.0subnet10.1.1.0255.255.255.0nat(dmz,inside)dynamicobj-10.1.2.30-10.1.2.40objectnetworkobj-10.1.2.30-10.1.2.40range10.1.2.3010.1.2.40NAT&InterfacePATtogethernat(inside)110.1.2.0255.255.255.0global(outside)1interfaceglobal(outside)1192.168.100.100-192.168.100.200objectnetworkobj-192.168.100.100_192.168.100.200range192.168.100.100192.168.100.200objectnetworkobj-10.1.2.0subnet10.1.2.0255.255.255.0nat(inside,outside)dynamicobj-192.168.100.100_192.168.100.200interfaceNAT&InterfacePATwithadditionalPATtogethernat(inside)110.0.0.0255.0.0.0global(outside)1192.168.100.1-192.168.100.200global(outside)1interfaceglobal(outside)1192.168.100.210objectnetworkobj-192.168.100.100_192.168.100.200range192.168.100.100192.168.100.200objectnetworkobj-10.0.0.0subnet10.0.0.0255.0.0.0objectnetworksecond-pathost192.168.100.210object-groupnetworkdynamic-nat-patnetwork-objectobjectobj-192.168.100.100_192.168.100.200network-objectobjectsecond-patnat(inside,outside)dynamicdynamic-nat-patinterface