Cisco 500 Series, Configuration Manual

Page: 320 / 1140

17-4
Cisco Security Appliance Command Line Configuration Guide
OL-12172-03
Chapter 17 Configuring NAT
NAT Overview
Figure 17-2 NAT Example: Transparent Mode
See the following commands for this example:
hostname(config)# nat (inside) 1 10.1.2.0 255.255.255.0
hostname(config)# global (outside) 1 209.165.201.1-209.165.201.15
NAT Control
NAT control requires that packets traversing from an inside interface to an outside interface match a NAT
rule; for any host on the inside network to access a host on the outside network, you must configure NAT
to translate the inside host address, as shown in
Figure 17-3 .
Figure 17-3 NAT Control and Outbound Traffic
Management IP
10.1.2.2
www.example.com
10.1.2.1
Host
10.1.2.27
Internet
Source Addr Translation
209.165.201.10 10.1.2.27
Static route on router to
209.165.201.0/27 through FWSM
191243
Security
appliance
10.1.1.1
NAT
No NAT
209.165.201.1
Inside Outside
10.1.2.1
Security
Appliance
132212