NAT

The video walks you through configuration NAT64, NAT46, and DNS64 on Cisco ASA using Object NAT to connect IPv6 to IPv4 network. We will look at both Stateless and Stateful NAT64 and NAT46, and highlight their pros and cons, and suggest when you should use one over the other. For Stateful NAT64, we will configure static, dynamic NAT, and PAT. We will also go over how DNS64 can help translating IP embedded in DNS packet as it crosses the v4-v6 network boundary. Packet analysis on Wireshark will be performed to help us gain better understanding of the IP address translation.

The video demonstrates a method to interface IPv6 to IPv4 network using NAT-PT on Cisco router. We will cover the basic 1-to-1 static NAT, dynamic NAT, and PAT primarily translating IPv6 source IP to IPv4. We will then look at DNS ALG feature that helps rectifying an embedded IP as DNS reply crosses IPv4-IPv6 boundary, while analysing it by Wireshark. We will configure IPv4 Mapped NAT feature to automate destination NAT process by mapping the entire IPv4 address space to IPv6 /96 subnet. The lab finishes with modification of the NAT global timeout values.

The video demonstrates a method to interface IPv6 to IPv4 network using NAT-PT on Cisco router. We will cover the basic 1-to-1 static NAT, dynamic NAT, and PAT primarily translating IPv6 source IP to IPv4. We will then look at DNS ALG feature that helps rectifying an embedded IP as DNS reply crosses IPv4-IPv6 boundary, while analysing it by Wireshark. We will configure IPv4 Mapped NAT feature to automate destination NAT process by mapping the entire IPv4 address space to IPv6 /96 subnet. The lab finishes with modification of the NAT global timeout values.

• ASA 1000V VPN - IKEv1 Phase1/2
• ASA 1000V VPN - IPSec
• ASA 1000V NAT Bypass (ie. Self-NAT)

• ASA 1000V Security Profile
  • Connection Timeout
  • IP Audit 
  • Static NAT, Port-Forwarding

• VPN Interface Policy only take affect when applied to an outside interface

• ASA 1000V VPN Device Policy (Phase 1)
  • IKE Policy

• ASA 1000V Security Profile
  • Connection Timeout Policy
  • IP Audit Policy
  • Static NAT Policy
  • Application Inspection Policy
  • TCP Intercept Policy
  • Access Control List (ACL)

The video combines the knowledge from our two previous videos on Object NAT and Twice NAT, and provides some guidelines on how to use them together on a single NAT table. We also discuss about pre-8.3 migration strategies and how the legacy command syntax (eg. nat, global, static, access-list) can be mapped to the new. We finish off the video with an experiment on the placement of destination NAT statement on the NAT table, and note its significance. We hope that you will have a better understanding on ASA 8.3 NAT by the end of this video.