Cisco Systems Different Translation Depending on the Destination Address and Port (Dynamic PAT)

5-39
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter5 Configuring Twice NAT (ASA 8.3 and Later)
Configuration Examples for Twice NAT
Different Translation Depending on the Destination Address and Port (Dynamic
PAT)
Figure 5-2 shows the use of source and destination ports. The host on the 10.1.2.0/24 network accesses
a single host for both web services and Telnet services. When the host accesses the server for Telnet
services, the real address is translated to 209.165.202.129:port. When the host accesses the same server
for web services, the real address is translated to 209.165.202.130:port.
Figure5-2 Twice NAT with Different Destination Ports
Step1 Add a NAT rule for traffic from the inside network to the Telnet server:
By default, the NAT rule is added to the end of section 1. If you want to add a NAT rule to section 3,
after the network object NAT rules, choose Add NAT Rule After Network Object NAT Rules.
The Add NAT Rule dialog box appears.
Web and Telnet server:
209.165.201.11
Internet
Inside
Translation
209.165.202.12910.1.2.27:80
10.1.2.27
10.1.2.0/24
Translation
209.165.202.13010.1.2.27:23
Web Packet
Dest. Address:
209.165.201.11:80
Telnet Packet
Dest. Address:
209.165.201.11:23
130040