Cisco Systems manual 4-20

4-20
Cisco ASA Series Firewall CLI Configuration Guide
Chapter4 Configuring Network Object NAT
Configuration Examples for Network Object NAT
Figure4-2 Dynamic NAT for Inside, Static NAT for Outside Web Server
Step1 Create a network object for the dynamic NAT pool to which you want to translate the inside addresses:
ciscoasa(config)# object network myNatPool
ciscoasa(config-network-object)# range 209.165.201.20 209.165.201.30
Step2 Create a network object for the inside network:
ciscoasa(config)# object network myInsNet
ciscoasa(config-network-object)# subnet 10.1.2.0 255.255.255.0
Step3 Enable dynamic NAT for the inside network:
ciscoasa(config-network-object)# nat (inside,outside) dynamic myNatPool
Step4 Create a network object for the outside web server:
ciscoasa(config)# object network myWebServ
Step5 Define the web server address:
ciscoasa(config-network-object)# host 209.165.201.12
Step6 Configure static NAT for the web server:
ciscoasa(config-network-object)# nat (outside,inside) static 10.1.2.20
Outside
Inside
10.1.2.1
209.165.201.1
Security
Appliance
myInsNet
10.1.2.0/24
Web Server
209.165.201.12
209.165.201.12 10.1.2.20
248773
Undo Translation
10.1.2.10 209.165.201.20
Translation