Udemy
    •  
    •  
    •  
    •  
    •  
    •  
    •  
    •  
Turn what you know into an opportunity and reach millions around the world.
Learn More
Your cart is empty.
Keep shopping
Network Address Translation - Cisco ASA and ASAx Firewalls
Rating: 4.9 out of 5(95 ratings)
375 students

Network Address Translation - Cisco ASA and ASAx Firewalls

EVERYTHING you need to know about NAT, and its configuration and verification on Cisco ASA and ASAx Firewalls.
Created byEd Harmoush
Last updated 5/2020
English
English [Auto],

What you'll learn

  • Network Address Translation (NAT)
  • Static NAT, Static PAT, Dynamic PAT, Dynamic NAT, Policy NAT, Twice NAT, Identity NAT, NAT Exemption
  • Syntax and Configuration of NAT on Cisco ASA and ASAx Firewalls
  • Operation and Verification of NAT on Cisco ASA and ASAx Firewalls

Course content

3 sections • 25 lectures • 3h 54m total length

  • Introduction0:38
  • Why does NAT exist?7:22

    Questions that will be answered in this lesson:

    • Why does NAT exist?

    • Why does every device need an IP address?

    • How does NAT solve the problem of IP address depletion?

  • NAT Definitions (Static NAT, Static PAT, Dynamic PAT, Dynamic NAT)6:50

    • What to the words NAT vs PAT mean?

    • What is a Static translation vs a Dynamic translation?

    • There are only four types of address translation -- what are they?

  • Static NAT7:05

    • What is a Static NAT?

    • What is a Bidirectional translation?

    • Does Static NAT conserve IP addresses?

  • Static PAT8:46

    • What is a Static PAT?

    • Is a Static PAT Bidirectional?

    • What are some use cases for a Static PAT?

    • Does Static PAT conserve IP addresses?

  • Dynamic PAT15:06

    • What is a Dynamic PAT?

    • What is a Unidirectional translation?

    • Does Dynamic PAT conserve IP addresses?

    • Why are the source ports re-randomized?

    • Why must the source ports of the Global IP address be unique?

  • Dynamic NAT11:36

    • What is a Dynamic NAT?

    • What are some use cases for a Dynamic NAT?

    • Are Dynamic NAT's used commonly today? Why or Why Not?

  • Policy NAT6:13

    • What is a Policy NAT?

    • How is a Policy NAT similar to or different from the translations we discussed earlier?

    • What are some potential use cases for a Policy NAT?

  • Twice NAT5:10

    • What is a Twice NAT?

    • How is a Twice NAT similar to or different from the translations we've discussed prior?

    • What are some potential use cases for Twice NAT?

  • Vendor Terminology Disambiguation4:20

    Every type of NAT we've discussed in this course is how NAT works as a concept -- which means it will apply to ALL VENDORS and ALL DEVICES. The only problem is... every vendor likes to call their implementation of NAT something different. This video shows a few examples of the different names used for NAT from different vendors, and shows you what Wikipedia and the RFC call the different iterations of NAT we discussed in this module.

Requirements

  • Basic understanding of computer networks

Description

This course has three modules.

The first module will teach you Everything there is to know about Network Address Translation: Why it exists, How it it works, What happens to packets as they get translated. This module will explain every type of translation:  Static NAT, Static PAT, Dynamic PAT, and Dynamic NAT. You'll learn about each of these in a way that is completely vendor agnostic -- the concepts you learn here will apply to any vendor and any platform. You'll then learn how these four types of translations are used in Policy NAT and Twice NAT.

The second module will teach you the Syntax and Configuration of every type of NAT. There are two ways to configure NAT on a Cisco ASA and ASAx Firewall, and those two ways are Auto NAT and Manual NAT. Both of these methods require the use of objects, so this module starts with by defining and configuring objects. Then we discuss Auto NAT, when to use it and how to configure it. Then we talk through Manual NAT and provide configuration examples of every type of NAT it can configure. That leads us into an illustration of NAT Exemption. Finally, we finally wrap up with a discussion on NAT precedence and the order in which NAT statements are evaluated by the ASA..

Lastly, the third module will circle back to the concepts learned in the first module, and actually prove and demonstrate every claim that was made about NAT. The goal of this course is not only to tell you how NAT works, but also to prove it to you so you can see it for yourself.

Who this course is for:

  • Network Engineers / Admins looking to Truly understand NAT
  • CCNA/CCNP Security Certification candidates
  • Anyone who configures or troubleshoots NAT on a Cisco Firewall

Report abuse