4-18
Cisco ASA Series Firewall CLI Configuration Guide
Chapter4 Configuring Network Object NAT
Configuration Examples for Network Object NAT
Configuration Examples for Network Object NAT
This section includes the following configuration examples:
•Providing Access to an Inside Web Server (Static NAT), page4-19
•NAT for Inside Hosts (Dynamic NAT) and NAT for an Outside Web Server (Static NAT), page4-19
•Inside Load Balancer with Multiple Mapped Addresses (Static NAT, One-to-Many), page 4-21
•Single Address for FTP, HTTP, and SMTP (Static NAT-with-Port-Translation), page4-22
•DNS Server on Mapped Interface, Web Server on Real Interface (Static NAT with DNS
Modification), page4-23
•DNS Server and FTP Server on Mapped Interface, FTP Server is Translated (Static NAT with DNS
Modification), page4-25
•IPv4 DNS Server and FTP Server on Mapped Interface, IPv6 Host on Real Interface (Static NAT64
with DNS64 Modification), page4-26
show running-config nat Shows the NAT configuration.
Note You cannot view the NAT configuration using the show
running-config object command. You cannot reference objects
or object groups that have not yet been created in nat commands.
To avoid forward or circular references in show command output,
the show running-config command shows the object command
two times: first, where the IP address(es) are defined; and later,
where the nat command is defined. This command output
guarantees that objects are defined first, then object groups, and
finally NAT. For example:
hostname# show running-config
...
object network obj1
range 192.168.49.1 192.150.49.100
object network obj2
object 192.168.49.100
object network network-1
subnet <network-1>
object network network-2
subnet <network-2>
object-group network pool
network-object object obj1
network-object object obj2
...
object network network-1
nat (inside,outside) dynamic pool
object network network-2
nat (inside,outside) dynamic pool
show xlate Shows current NAT session information.
Command Purpose