Cisco Systems Single Address for FTP, HTTP, and SMTP (Static NAT-with-Port-Translation)

4-32
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter4 Configuring Network Object NAT (ASA 8.3 and Later)
Configuration Examples for Network Object NAT
Single Address for FTP, HTTP, and SMTP (Static NAT-with-Port-Translation)
The following static NAT-with-port-translation example provides a single address for remote users to
access FTP, HTTP, and SMTP. These servers are actually different devices on the real network, but for
each server, you can specify static NAT-with-port-translation rules that use the same mapped IP address,
but different ports. (See Figure4-4.)
Figure4-4 Static NAT-with-Port-Translation
Step1 Create a network object for the FTP server address:
Step2 Define the FTP server address, and configure static NAT with identity port translation for the FTP server:
Host
Outside
Inside
Undo Translation
10.1.2.27209.165.201.3:21
Undo Translation
10.1.2.28209.165.201.3:80
Undo Translation
10.1.2.29209.165.201.3:25
FTP server
10.1.2.27
HTTP server
10.1.2.28
SMTP server
10.1.2.29
130031