Cisco ASA NAT

This post explains how to use the packet tracer function to check NAT settings.

The key takeaway point for me was the following:

With Packet Tracer (PT) we can inject real packet into the ASA forwarding plane and see what’s going on. For NAT we can have three sections in the PT output (called Phases):

  • NAT – shows how the source of the packet will be translated
  • UN-NAT – shows how the destination of the packet will be translated
  • NAT RPF-CHECK – shows how might/should source of the returning packet be translated (RPF – Reverse Path Forwarding)
Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s