Cisco Systems Configuring Static Policy NAT, PAT, or Identity NAT

35-30
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter35 Configuring NAT (ASA 8.2 and Earlier)
Using Static NAT
Configuring Static Policy NAT, PAT, or Identity NAT
Figure 35-22 shows typical static policy NAT, static policy PAT, and static policy identity NAT scenarios.
The translation is always active so both translated and remote hosts can originate connections.
Figure35-22 Static Policy NAT Scenarios
To configure static policy NAT, PAT, or identity NAT, perform the following steps:
Step1 In the Configuration > Firewall > NAT Rules pane, choose Add > Advanced > Add Static Policy NAT
Rule.
The Add Static Policy NAT Rule dialog box appears.
Step2 In the Original area, from the Interface drop-down list, choose the interface that is connected to the hosts
with real addresses that you want to translate.
Step3 Enter the real addresses in the Source field, or click the ... button to choose an IP address that you already
defined in ASDM.
Specify the address and subnet mask using prefix/length notation, such as 10.1.1.0/24. If you enter an
IP address without a mask, it is considered to be a host address, even if it ends with a 0.
Step4 Enter the destination addresses in the Destination field, or click the ... button to choose an IP address
that you already defined in ASDM.
Specify the address and subnet mask using prefix/length notation, such as 10.1.1.0/24. If you enter an
IP address without a mask, it is considered to be a host address, even if it ends with a 0.
Separate multiple destination addresses by a comma.
By default, the field shows any, which allows any destination address.
Step5 In the Translated area, from the Interface drop-down list, choose the interface where you want to use the
mapped addresses.
10.1.1.1 209.165.201.1
Inside Outside
10.1.1.2 209.165.201.2
Security
Appliance
Static Policy NAT
Static Policy Identity NAT
Static Policy PAT
10.1.1.1:23 209.165.201.1:23
Inside Outside
10.1.1.2:8080 209.165.201.2:80
Security
Appliance
209.165.201.1 209.165.201.1
Inside Outside
209.165.201.2 209.165.201.2
Security
Appliance
191661