Cisco Systems CL-28826-01 Configuring NAT on PIX, FWSM, and pre-8.3 ASA Devices

23-17

User Guide for Cisco Security Manager 4.4

OL-28826-01

Chapter2 3 Configuring Network Address Translation

NAT Policies on Security Devices

Configuring NAT on PIX, FWSM, and pre-8.3 ASA Devices

The following sections describe configuring network address translation on PIX and FWSM devices, and

on pre-8.3-version ASAs. (See Configuring NAT on ASA 8.3+ Devices, page 23-32 for information

about configuring NAT on ASA 8.3+ devices.)

•Address Pools, page 23-17

•Translation Rules: PIX, FWSM, and pre-8.3 ASA, page 23-18

–

Translation Exemptions (NAT 0 ACL), page 23-19

–

Dynamic Rules Tab, page 23-21

–

Policy Dynamic Rules Tab, page23-23

–

Static Rules Tab, page23-25

–

General Tab, page23-30

Use the Address Pools page to view and manage the global address pools used in dynamic NAT rules.

The Address Pool dialog box is used to add and edit these address pools. Refer to Address Pool Dialog

Box, page 23-17 for descriptions of the fields displayed in the Global Address Pools table on this page.

Navigation Path

•(Device view) Select NAT > Address Pools from the Device Policy selector.

•(Policy view) Select NAT (PIX/ASA/FWSM) > Address Pools from the Policy Type selector.

Select an existing policy from the Shared Policy selector, or right-click Address Pools to create a

new policy.

Use the Address Pool dialog box to add or edit a global address pool for use in dynamic NAT rules.

Navigation Path

You open the Address Pool dialog box by clicking the Add Row or Edit Row buttons on the Address

Pools, page 23-17.