Task 2.2: Different ways to NAT

Was wondering if anyone knew if there was any functional difference between the suggested answer:

static (inside,outside) netmask

and the "traditional" use of partnering a "nat" statement with a "global" statement:

ASA1(config)# show run nat
nat (inside) 1
ASA1(config)# show run global
global (outside) 1

Both would be appropriate responses to the question and requirements, I imagine.


  • The static translation will translate if the traffic is sourced from the outside interface and/or from the inside.

    the dynamic nat will only translate outbound traffic. in the above output, inside to outside traffic.

    I hope this answers your question.
Sign In or Register to comment.