Cisco Systems Configuring Static NAT or Static NAT-with-Port-Translation

5-18
Cisco ASA Series Firewall CLI Configuration Guide
Chapter5 Configuring Twice NAT
Configuring Twice NAT
Configuring Static NAT or Static NAT-with-Port-Translation
This section describes how to configure a static NAT rule using twice NAT. For more information about
static NAT, see the “Static NAT” section on page3-3.
Detailed Steps
Command Purpose
Step1 Create network objects or groups for the:
•Source real addresses
•Source mapped addresses
•Destination real addresses
•Destination mapped addresses
See the “Adding Network Objects for Real and Mapped
Addresses” section on page5-4.
If you want to configure source static interface NAT with port
translation only, you can skip adding an object for the source
mapped addresses, and instead specify the interface keyword in
the nat command.
If you want to configure destination static interface NAT with port
translation only, you can skip adding an object for the destination
mapped addresses, and instead specify the interface keyword in
the nat command.
Step2 (Optional) Create service objects for the:
•Source or Destination real ports
•Source or Destination mapped ports
See the “(Optional) Adding Service Objects for Real and Mapped
Ports” section on page 5-6.