Setting up static nat on mgmt object

[the_rock]

Hey guys,

Just a very quick question. I was wondering, since customer wanted to ensure, whats really main reason why anyone would set up mgmt server to be statically natted to external IP? I know most of the time its for access from external or if gateways have to send logs to different IP. But, client still wanted to ensure if they really need that or not. I attached the screenshot.

tx

[PhoneBoy]

You’ve articulated most of the reasons why it is necessary.
SIC/VPN also needs it to be able to reach the management IP for certificate validation.
If none of these situations aren’t relevant in the customer environment, it’s not required to set the NAT up.