PrepAway - Latest Free Exam Questions & Answers

Which Cisco ASA CLI nat command is generated based on t…

Refer to the exhibit.

Which Cisco ASA CLI nat command is generated based on this Cisco ASDM NAT configuration?

PrepAway - Latest Free Exam Questions & Answers

A.
nat (dmz, outside) 1 source static any any

B.
nat (dmz, outside) 1 source static any outside

C.
nat (dmz,outside) 1 source dynamic any interface

D.
nat (dmz, outside) 1 source dynamic any interface destination dynamic outside outside

E.
nat (dmz, outside) 1 source static any interface destination static any any

F.
nat (dmz, outside) 1 source dynamic any outside destination static any any

Explanation:
Pretty straight forward – like this example
http://tunnelsup.com/2011/06/24/nat-for-cisco-asas-version-8-3/ Regular Dynamic PAT
To create a many-to-one NAT where the entire inside network is getting PAT’d to a single outside IP do the following.
Old 8.2 command:
nat (inside) 1 10.0.0.0 255.255.255.0
global (outside) 1 interface
New 8.3 equivalent command:
object network inside-net subnet 10.0.0.0 255.255.255.0 nat (inside, outside) dynamic interface
Note: the interface command is the 2nd interface in the nat statement, in this case the outside.


Leave a Reply