ASA NAT with DHCP assigned IP address on the outside interface

If the outside interface of an ASA is assigned an IP address using DHCP, it is still possible to configure dynamic NAT translation using that interface as the outside interface. This can be done using the following command:

nat (inside,outside) source dynamic internal_addresses interface


  • the internal_addresses is an object or ACL that specifies the internal address pool to be translated
  • the interface keyword is used to specify that the IP address of the outside interface should be used for translation