Cisco Systems Configuring Dynamic NAT

4-5
Cisco ASA Series Firewall CLI Configuration Guide
Chapter4 Configuring Network Object NAT
Configuring Network Object NAT
Detailed Steps
Configuring Dynamic NAT
This section describes how to configure network object NAT for dynamic NAT. For more information,
see the “Dynamic NAT” section on page3-7.
Detailed Steps
Command Purpose
object network obj_name
{host ip_address | range ip_address_1
ip_address_2 | subnet subnet_address
netmask}
Example:
ciscoasa(config)# object network TEST
ciscoasa(config-network-object)# range
10.1.1.1 10.1.1.70
Adds a network object, either IPv4 or IPv6.
object-group network grp_name
{network-object {object net_obj_name |
subnet_address netmask |
host ip_address} |
group-object grp_obj_name}
Example:
ciscoasa(config)# object network TEST
ciscoasa(config-network-object)# range
10.1.1.1 10.1.1.70
ciscoasa(config)# object network TEST2
ciscoasa(config-network-object)# range
10.1.2.1 10.1.2.70
ciscoasa(config-network-object)#
object-group network MAPPED_IPS
ciscoasa(config-network)# network-object
object TEST
ciscoasa(config-network)# network-object
object TEST2
ciscoasa(config-network)# network-object
host 10.1.2.79
Adds a network object group, either IPv4 or IPv6.
Command Purpose
Step1 Create a network object or group for the
mapped addresses.
See the “Adding Network Objects for Mapped Addresses” section on
page 4-4.
Step2 object network obj_name
Example:
ciscoasa(config)# object network
my-host-obj1
Configures a network object for which you want to configure NAT,
or enters object network configuration mode for an existing network
object.