Quick question re: migration of nat exemption from asa pre-8.2 to post-8.2

I am going through http://www.cisco.com/en/US/docs/security/asa/asa83/upgrading/migrating.pdf and I have a question about nat exemption.  According to the guide above, the migration of nat exemption will look like this:
access-list inside_nat0_outbound extended permit ip vLan201 255.255.255.0 172.19.252.0 255.255.255.0
nat (inside) 0 access-list inside_nat0_outbound
object network obj-vLan201
subnet vLan201 255.255.255.0
object network obj-172.19.252.0
subnet 172.19.252.0 255.255.255.0
nat (inside,any) source static obj-vLan201 obj-vLan201 dest static obj-172.19.252.0 obj-172.19.252.0
My question is this: if acl inside_nat0_outbound has multiple ACEs, does the migrated configuration contain a separate "nat (inside,any)" statement for each ACE in the original pre-8.3 config, like this?
access-list inside_nat0_outbound extended permit ip vLan201 255.255.255.0 172.19.252.0 255.255.255.0
access-list inside_nat0_outbound extended permit ip vLan201 255.255.255.0 172.19.253.0 255.255.255.0
nat (inside) 0 access-list inside_nat0_outbound
object network obj-vLan201
subnet vLan201 255.255.255.0
object network obj-172.19.252.0
subnet 172.19.252.0 255.255.255.0
object network obj-172.19.253.0
subnet 172.19.253.0 255.255.255.0
nat (inside,any) source static obj-vLan201 obj-vLan201 dest static obj-172.19.252.0 obj-172.19.252.0
nat (inside,any) source static obj-vLan201 obj-vLan201 dest static obj-172.19.253.0 obj-172.19.253.0
Our current acl has about twenty entries, which would make for twenty nat statements, if this is right.
Thanks,
-Mathew

Hi,
Default behaviour for NAT past 8.2 software level is to let traffic flow through the ASA without NAT. Before that "nat-control" setting on the ASA defined if the traffic needed a NAT configuration or not.
If your NAT0 / NAT Exempt configurations contain statements meant for VPN connections then you have to make new ones for those.
Are the entries in your old NAT0 configurations meant for traffic between different networks in your own LAN or are they meant for different VPN connections? Or perhaps both.
But as you said, moving to the new software does mean that even some simple NAT configuration will now contain more configurations than in the old software.
- Jouni

Similar Messages

  • Quick Question (re:exporting from iMovie into iDVD)

    Hello everyone!
    I just have a quick question for you all... (I want to see if this is normal - I'm on a deadline and this is kind of freaking me out)
    So, we have a 20 minute or so video in iDVD. It plays fine, etc etc. The goal is to burn it to a DVD.
    I used the "Export -> to iDVD" function in iMovie, which launched iDVD.
    But here is the weird thing: nothing comes up in iDVD. It doesn't make a new file, doesn't give me anything... it is just open, waiting for me to create a new project to work with.
    YET, if I look in the Activity Monitor, I do see that EncoderServer (using 123% CPU) and ThumbnailServer (both iDVD processes) are running.... but shouldn't iDVD have told me it is working or that it is dealing with data?
    This is very un-"apple". I totally would have expected a progress bar of some sort in iDVD telling me it is working or something.... or is something wrong and I should try to export it in a different way?
    (I guess the underlying question is: when you export from iMovie to iDVD, does iDVD normally give you any 'heads-up' that it is working? how long does it normally take to open the project in iDVD?)

    Hi Matt!
    when you export from iMovie to iDVD, does iDVD normally give you any 'heads-up' that it is working? how long does it normally take to open the project in iDVD?)
    Yes, and it's instant.
    What you should see is iDVD opening and asking you to create a new project, It will suggest naming it the same as the iMovie project.
    There are reports that exporting from Imovie to iDVD can produce problems. What I do is save the iMovie project and close iMovie. Open iDVD, create the new DVD project, then go the File menu in iDVD, scroll down to Import, and in the side menu select Video. This open your Movie Folder, wherein resides your iMovie project. Select it and it imports into iDVD in a flash.
    Remember: iMovie projects go in the Movies Folder, iDVD projects go in the Documents folder. Change that, and they get very confused and unhappy.

  • Quick question!!  Is it mandatory that I set up my DSL through the time capsule? I'd like to leave my current modem from my provider as the primary unit for networking.  So in other words can I just set up the time capsule as a back-up device for now and

    Quick question!!  Is it mandatory that I set up my time capsule as my DSL modem?  Based on the location of my iMAC right now it would be better to just leave the modem provided by my internet provider in place.  I really just want to use the time capsule as a back-up storage device for now and connnect the ethernet cable from my ISP at a later date.

    Generally it is easier to bridge the TC and plug it into the router.. it then lives on the network.. it is after all, a network drive.. and you can access it via your existing connection whether wireless or wired to the existing modem.
    If you really want a totally stand alone setup please tell me how you are presently accessing internet on the Mac you want to backup on the TC.

  • Hi guys. Just a quick question. My wife has a Mac Book Pro and when she is browsing the web she can use a two fingered gesture to go back to her previous page (by swiping from right to left). Is there any way to set that up on my iPad Mini. Many thanks.

    Hi guys. Just a quick question. My wife has a Mac Book Pro and when she is browsing the web she can use a two fingered gesture to go back to her previous page (by swiping from right to left). Is there any way to set that up on my iPad Mini. Many thanks.

    Not in the Safari browser she can't. That is not supported on the iPad. There are other mobile browsers that do have that functionality - one is iCab Mobile.
    https://itunes.apple.com/us/app/icab-mobile-web-browser/id308111628?mt=8

  • Quick question from future mac user

    Hi there.
    Just a quick question about the Intel iMacs.
    Total noob with Macs so please forgive me, I'm looking to get away from Windows and PC's but not sure what I would need exactly.
    Would the 24":3.06GHz Intel Core 2 Duo iMac with 4GBs of RAM and 1TB hdd be more than enough to handle video/audio editing with Final Cut Pro Studio, some gaming (such as newer MMO games or RPG/FPS games) and maybe running VMware Fusion for running Windows apps and games that I have/use that are either not available or not yet supported by Apple?
    Or would I be looking at goin with the Mac Pro?
    I'd rather shoot for the iMac because I'm SO tired of PC's and boxes and would like my computer to actually look nice as well as kick butt. But I'm just worried that if I got with the iMac I won't be able to perform those functions well or at all.
    I love the look and feel of the iMac although I don't think you can get more than 4GBs of RAM or more than ONE hard drive inside (which isn't a big concern as I can always use external drives) so I'm just wondering if upgrading to the extra ram and hdd space from the get go would be a great help without having to worry about adding more later.
    I'd like to be able to just use the iMac than the Mac Pro because the price difference seems to jump up quite a bit between iMac and Mac Pro. I'm just worried if that type of iMac setup wouldn't be enough for what I need.
    Any suggestions or information would be greatly appreciated. Thanks.
    Janin

    The iMac in general is more than enough to perform those tasks well however the Mac Pro still has it's advantages. Lenn already went over those so take a look at these speed scores as they may help you to make your decision.
    http://www.marketingtactics.com/Speedmark/
    Either way I recommend getting the base RAM configuration from Apple and purchase RAM from OWC.
    http://eshop.macsales.com/item/Other%20World%20Computing/6400DDR2S4MP/
    http://eshop.macsales.com/MyOWC/Upgrades.cfm?sort=pop&model=284&type=Memory&TI=0 655&shoupgrds=Show+Upgrades
    George

  • Syncing Apps from Iphone to Itunes and vice versa, quick question.

    Hello, so I had a small question to ask about transferring apps from both the iphone to itunes.
    Basically, I downloaded an app from the app store ON my iphone.
    I've made a lot of progress and have a lot of data in this app.
    The(Sync app) box was never checked on my itunes, so I transferred my purchases from my iphone to my itunes, and now i've downloaded a few more apps (over 20mb) ON itunes that I want to put on my iphone.
    Thing is, when I click "sync apps" it gives me a warning saying something along the lines of "Apps in itunes will replace all in iphone, including data"
    Now, i've already transferred my purchases, so all the apps from my phone are on itunes, but if I sync, will I lose the DATA in my apps on my iphone? Or will the data remain in those apps?
    Basically, will syncing my apps replace my settings/data/progress of the apps I have on my iphone?

    There is no data in the apps themselves. Your app data is stored in the backup file iTunes creates. http://support.apple.com/kb/HT1766
    From Page 179 of http://manuals.info.apple.com/enUS/iphone_userguide.pdf, "You can reinstall an app and restore its data as long as you backed up iPhone with iTunes on your computer. (If you try to delete an app that hasn’t been backed up to your computer, an alert appears.) To retrieve the app data, you must restore iPhone from a backup containing the data."
    So, make a backup before you click the "Sync apps button. Then, you may have to restore your phone from that backup to reload the data.

  • Question about migrating my stuff from iMac to a new one

    Hi I must be on my fourth consecutive iMac now, and it is late 2007 model I think. I am considering about getting a new one soon. It is very tempting to use Migration Assistant to haul everything to the new one from the old one but:
    After 4 previous migrations, will I have a slower system than a clean, new one with just the files, not migrated settings and other stuff?
    Are there some negative effects of migrating vs installing everything from scratch?
    Thanks for any input!
    BR
    Timo

    When using Migration Assistant in my opinion it's best to connect to either a Time Machine Backup via USB or Firewire to the new machine. DO NOT use Wi-Fi to migrate. Also remember if you should prepare the old machine to ensure all of it's apps are up-to-date and it is running well otherwise.
    I would also recommend using Setup Assistant to migrate rather than Migration Assistant. Both are almost the same,however SA is what starts up when you turn on any new Mac for the first time. It will come to a point where it asks if you are migrating from an older Mac. Select yes, select your TM backup EHD and connect it (USB or Firewire remember??) to the new machine and select the options and let it do the migration. This method normally results in a smooth migration and will not create a new user account like Migration Assistant will.

  • Report Generation Toolkit Error Quick Question

    Hi,
         I created the most awesome LabVIEW report ever at my desk using a trial version of the RGT and Office 2003.  I took this to my production machine and ")@#(&%(*#^%()^!!!"  The production machine has office 2007 and a fully licensed version of the RGT.  Both machines have LabVIEW 8.6.0.  I've read all the stuff about these errors and something about classes and dll's and whatnot's.  So my quick question, is:  Instead of matching the versions of Microsoft Office as recommended, can I just rewrite from scratch the VI that creates this world's most awesome LabVIEW report on the production machine to create the same effect? 
    Solved!
    Go to Solution.

    Hi 
    Quick Answer: Probably
    Slower answer: Microsoft changed a lot of things behind the scenes in Office 2007, but the Report Generation toolkit version 1.1.3 supports Office 2007 so you should be good to go. Depends on what functions are included in your VI. Liek the read me says "Several default settings in Microsoft Office 2007 differ slightly from previous versions. Reports you generate using Office 2007 might look different than reports you generate from other versions of Office because font sizes, cell sizes, and so on, differ."
    Best Regards
    David
    NISW

  • How do I get rid of the Microsoft Setup Assistant loop? I migrated my software/documents from another laptop so don't have the disk to reinstall. Please help! Can't open any Microsoft Office software, like Word, and stuck in a loop?

    I migrated my software/documents from another laptop so don't have the disk to reinstall. Please help! Can't open any Microsoft Office software, like Word (for 2008), and stuck in a loop?
    Whenever I select Word Microsoft Setup Assistant appears, asks for feedback, then after selecting okay (both on saying yes or no to feedback) goes on to a registration page. When I click on this it says I've already registered so I just click okay, and then move on to a update page. After this, if I click on Word, the process repeats itself.
    As I said, I don't have the disk to reinstall, and can't find the Office Settings to delete as many pages have suggested I should try. Safe Boot restarting also hasn't worked... Really stuck and need Word very soon for work.
    If you can help, that would be great, and feel free to ask any questions about the situation as I'm not an expert here.
    Cheers,
    Jack

    First, export your contact from iCloud.com and save them on your computer in a safe spot some where (like you desktop).  Use this to help you do this: http://support.apple.com/kb/PH3606
    Next, on both of your devices, go to Settings > iCloud and turn on contacts and select Merge. Then turn off contacts and select 'Delete form my [device]' when prompted.
    Now go back to iCloud.com and select a contact (yes they will all be messed up again) and select Command+A on a Mac or Control+A on a PC to select all of the contacts.  Tap the delete key on your keyboard (or right click /control click a contact and select delete).
    You iPhone, iPad and iCloud.com should not be empty for contacts.
    Go back to Settings > iCloud on both devices and turn on contacts again (you should not see merge this time).
    Next, go back to iCloud.com and import your contacts (those exported .vcards).  You can either drag and drop them into the empty contacts list in your web browser, or you can use the gear icon to import.
    You cleaned up contacts should import correctly into iCloud.com and sync to both of your devices.
    Good luck.

  • HT4889 I have accidentally created another account when using Migration Assistant to a new MBA. How do I now 'migrate' all the files from both accounts into one to save myself having two accounts, both of which are me? Help?

    I have accidentally created another account when using Migration Assistant to a new MBA. I have read that I probably should not have skipped migration in the initial set up and the problem would have been avoided but, alas, here I am. Does anyone know how I can 'migrate' all the files from one of the accounts that has been created to the other, so then I can delete it and have a single user on the computer seeing as I am the only person using it? I have read starting again, if this is the way to go, where is the best place to start 'starting again'?

    Yes definitely should see it but its not coming up (I don't think) when I log out of 2nd user and into the main account. Opening finder in the 2nd account, I can obviously find the public folder because thats where I dropped all the files, but when in the main account, it can't be found. The only public folder that comes up is the folder for that account (main account) and it does not display files I'm looking for. Frustrating....
    EDIT: Have found it through a round-about way but all music and photo and movie etc files have a red stop sign disallowing them from being transferred. Can you guess what the next question will be?

  • Two quick questions about Library after moving beginning on a new computer

    Hi there,
    I just moved from Windows to Mac, meaning I had to move my iTunes library from the old PC to my new MBA.
    Just a couple of quick questions.
    1. When I started iTunes on my new Mac, in the preferences I directed the media folder to the folder with all my itunes music/podcasts etc, and then I imported the Library XML file.  Is this incorrect? Should I have imported a different file? Should I have used the itl file instead? 
    If so, should I delete the library and start again?  (if this is the case, please suggest the best way of doing this without affecting my media)
    - a kind of sub-question to this one:  some of the media files arent showing up in the iTunes library, but they are in the media folder on the ext HDD.  Is there a way I can find out which ones havent been recognized by iTunes?  Whats the best way of getting them in to my library?
    2. Pretty much half of my podcasts have not been loaded in the new iTunes.  The ones that havent were ones that I subscribed to on my iPhone, whereas the ones that show up in iTunes were ones I downloaded from iTunes.  When I connect my iPhone and sync it with iTunes, will those podcasts show up in iTunes?  Or is there a risk that they will be deleted from my iPhone?
    Cheers,

    The .xml is lacking some information such as ratings, date added, and play count.  Using the .itl includes this information but cannot be imported using the method you did.
    A complete library is everything in the iTunes folder.  By using the method you did you left the artwork behind in the artwork folder on the other machine.
    Selecting the media folder in preferences does not get iTunes to recognize the media.  All it does is tell iTunes to start storing new media in that location.
    Using the method I outlined nothing will be missed (with the exception of WMA) because you aren't rebuilding your library, you are using the one that already exists.
    You don't have to re-copy everything as long as you get the stuff you missed and re-assemble it all as it was before except not on the Mac.
    What are the iTunes library files? - http://support.apple.com/kb/HT1660
    More on iTunes library files and what they do - http://en.wikipedia.org/wiki/ITunes#Media_management
    What are all those iTunes files? - http://www.macworld.com/article/139974/2009/04/itunes_files.html
    Where are my iTunes files located? - http://support.apple.com/kb/ht1391

  • A quick question about WebDynpro SLD and R/3 with concurrent users

    Hello ,
    I have a very quick question about Webdynpros and SLD connecting to an R/3 system, when you configure a webdynpro to connect to an R/3 system using SLD, you configure a user name and password from the R/3  for the SLD to use. What I would like to know is when I have concurrent users of my webdynpro, how can I know what one user did in R/3 and what another user did? Is there a way for the users of the web dynpro to use their R/3 credentials so SLD can access the R/3? Like dynamically configuring the SLD for each user?
    - I would like to avoid leaving their their passwords open in the code ( configuring two variable to get the users username and password and use these variables as JCO username and password )
    Thanks Ubergeeks,
    Guy

    Hi Guy
    You will have to use Single Sign On to achieve this. In the destination you have defined to connect to R/3 , there is an option to 'useSSO' instead of userid and password. This will ensure that calls to R/3 will be with the userid that has logged into WAS. You wont need to pass any passwords because  a login ticket is generated from WAS and passed on to R/3. The userid is derived from this ticket.
    For this to happen you will have to maintain a trust relation ship between R/3 and your WAS ,there is detailed documentation of this in help files. Configuration is very straight forward and is easy to perform
    Regards
    Pran

  • 2 Quick Question

    Hello - I'm pretty new to Motion and have 2 quick questions:
    1) If you've got a bunch of keyframes on a timeline and want to make the entire sequence longer - is there a way to just pull the last frame out and have it automatically interpolate the keyframes in between so that it keeps the same timing and everything... it just makes the whole sequence take longer?
    2) On the same timeline with a bunch of keyframes, can you apply one long Interpolation (ala "Ease Out") to the entire thing from A-Z so that the whole sequence eases out rather than just keyframe to keyframe?
    Thanks!!
    Jason

    Heya,
    1. If you're asking if you have something like the "roving" keyframes in AE...well, kinda. Keyframes on footage, shapes, generators, particles, replicators—objects that create an image—don't seem to scale. But keyframes on secondary objects like behaviors and filters do scale.
    2. Very easy: go into the Keyframe Editor and click on the animation state icon/menu for the parameter you want to change. The icon/menu is the last column after the parameter's value in the left-hand side of the Keyframe Editor. If you pick an interpolation type in that menu, it applies it to all keyframes in that particular curve. It's also the same place where you can set the before/after extrapolation, like ping-pong, progressive, etc.

  • Quick Question: When to use ( ) and when to use [ ] and why the ( *)

    Hi all,
    A quick question that i'm sure is very simple but is slightly confusing me. I've just started trying to learn Objective-C and am a little confused by ( ) and [ ].
    I get that you use the [ ] brackets when you want something specific from an object, i.e.
    [ textField textColor ]
    and that you use ( ) brackets for things like:
    if ( x == y) {
    But I get confused when I see things like:
    NSLog(@"some text here");
    Why does that get ( ) brackets and why is it not [ ].
    Also another point of confusion, creating methods... Why are some methods done like:
    - (void)awakeFromNib
    And others done like (with the additional "*" added):
    - (NSString *)stringvalue
    As I said, I'm sure this is very simple and obvious, but it is confusing me slightly.
    Thanks in advance!

    Adam:
    As you already know, square brackets are used to send a message to an object, so if a object like myObject implements the method -doSomething, you can call it with:
    \[myObject doSomething\];
    The other use square for brackets have is to index C-style arrays, such as:
    aValue = anArray\[10\]; // Get the 10-element of an array
    However, because C-style arrays are rarely used in Cocoa applications (use NSArray instead) you will not see this situation often.
    Parenthesis in expressions are used to group and prioritize, such as:
    x = 10 * (3 + 5); // x = 80
    If () statements use it to delimit the test expression. Same with while (). for () uses it to enclose the limits and increment statements, etc.
    The other important use of parenthesis is in calling a C function:
    result = foo(3);
    means that you are calling the function named foo with the argument 3, and storing the the return value in the variable 'result'. This is different from a message because a C function is not a method of an object. They exist independently of any objects. NSLog() is a function defined within Cocoa but it is not a method. So, you call it with the traditional C function call syntax. Cocoa defines other functions like NSStringFromRect(), which takes an NSRect as argument and returns a pointer to an NSString.
    And that leads me to your last question. Some methods return simple types, like int, float, or void (i.e. returns no value). These methods will have prototypes like:
    \- \(void\)returnNothing;
    \- (int)returnInteger;
    Other methods return pointers to types, like:
    \- (int \*)returnPointerToInteger;
    \- (void \*)returnPointerToAnything; // In obj-C one typically uses id instead of void*
    Returning whole objects from methods has problems and it is better to just return a pointer (the address in memory) instead:
    \- (NSString *)makeAString;
    The method above returns a pointer to an NSString rather than the entire object.
    Good luck with your learning,
    Juan-Pablo
    Message was edited by: Juan Pablo Claude

  • Hi, I have quick question about use of USEBEAN tag in SP2. When I specify a scope of SESSION for the java bean, it does not keep the values that I set for variable in the bean persistent.Thanks,Sonny

     

    Make sure that your bean is implementing the serializable interface and that
    you are accessing the bean from the session with the same name.
    Bryan
    "Sandeep Suri" <[email protected]> wrote in message
    news:[email protected]..
    Hi, I have quick question about use of USEBEAN tag in SP2. When I
    specify a scope of SESSION for the java bean, it does not keep the
    values that I set for variable in the bean persistent.Thanks,Sonny
    Try our New Web Based Forum at http://softwareforum.sun.com
    Includes Access to our Product Knowledge Base!

Maybe you are looking for