21-17
Cisco ASDM User Guide
OL-16647-01
Chapter 21 Configuring NAT
Using Dynamic NAT
Real Addresses and Global Pools Paired Using a Pool ID
In a dynamic NAT rule, you specify real addresses and then pair them with a global pool of addresses to
which the real addresses are mapped when they exit another interface (in the case of PAT, this is one
address, and in the case of identity NAT, this is the same as the real address). Each global pool is assigned
a pool ID.
NAT Rules on Different Interfaces with the Same Global Pools
You can create a NAT rule for each interface using the same global address pool. For example, you can
configure NAT rules for Inside and DMZ interfaces, both using global pool 1 on the outside interface.
Traffic from the Inside interface and the DMZ interface share a mapped pool or a PAT address when
exiting the Outside interface (see Figure 21-14).
Figure 21-14 NAT Rules on Multiple Interfaces Using the Same Global Pool
Web Server:
www.cisco.com
Outside
DMZ
Inside
Global 1: 209.165.201.3-
209.165.201.10
NAT 1: 10.1.2.0/24
NAT 1: 10.1.1.0/24
10.1.1.15
10.1.2.27
132930
Translation
209.165.201.310.1.2.27
Translation
209.165.201.410.1.1.15