1-22
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Network Object NAT
Configuration Examples for Network Object NAT
Single Address for FTP, HTTP, and SMTP (Static
NAT-with-Port-Translation)
The following static NAT-with-port-translation example provides a single address for remote users to
access FTP, HTTP, and SMTP. These servers are actually different devices on the real network, but for
each server, you can specify static NAT-with-port-translation rules that use the same mapped IP address,
but different ports. (See
Figure 1-4
Static NAT-with-Port-Translation
Step 1
Create a network object for the FTP server address:
hostname(config)#
object network FTP_SERVER
Step 2
Define the FTP server address, and configure static NAT with identity port translation for the FTP server:
hostname(config-network-object)#
host 10.1.2.27
hostname(config-network-object)#
nat (inside,outside) static 209.165.201.3 service tcp ftp
ftp
Step 3
Create a network object for the HTTP server address:
hostname(config)#
object network HTTP_SERVER
Step 4
Define the HTTP server address, and configure static NAT with identity port translation for the HTTP
server:
hostname(config-network-object)#
host 10.1.2.28
hostname(config-network-object)#
nat (inside,outside) static 209.165.201.3 service tcp
http http
Host
Outside
Inside
Undo Translation
10.1.2.27
209.165.201.3:21
Undo Translation
10.1.2.28
209.165.201.3:80
Undo Translation
10.1.2.29
209.165.201.3:25
FTP server
10.1.2.27
HTTP server
10.1.2.28
SMTP server
10.1.2.29
130031
Summary of Contents for 5505 - ASA Firewall Edition Bundle
Page 28: ...Glossary GL 24 Cisco ASA Series CLI Configuration Guide ...
Page 61: ...P A R T 1 Getting Started with the ASA ...
Page 62: ......
Page 219: ...P A R T 2 Configuring High Availability and Scalability ...
Page 220: ......
Page 403: ...P A R T 2 Configuring Interfaces ...
Page 404: ......
Page 499: ...P A R T 2 Configuring Basic Settings ...
Page 500: ......
Page 533: ...P A R T 2 Configuring Objects and Access Lists ...
Page 534: ......
Page 601: ...P A R T 2 Configuring IP Routing ...
Page 602: ......
Page 745: ...P A R T 2 Configuring Network Address Translation ...
Page 746: ......
Page 845: ...P A R T 2 Configuring AAA Servers and the Local Database ...
Page 846: ......
Page 981: ...P A R T 2 Configuring Access Control ...
Page 982: ......
Page 1061: ...P A R T 2 Configuring Service Policies Using the Modular Policy Framework ...
Page 1062: ......
Page 1093: ...P A R T 2 Configuring Application Inspection ...
Page 1094: ......
Page 1191: ...P A R T 2 Configuring Unified Communications ...
Page 1192: ......
Page 1333: ...P A R T 2 Configuring Connection Settings and QoS ...
Page 1334: ......
Page 1379: ...P A R T 2 Configuring Advanced Network Protection ...
Page 1380: ......
Page 1475: ...P A R T 2 Configuring Modules ...
Page 1476: ......
Page 1549: ...P A R T 2 Configuring VPN ...
Page 1550: ......
Page 1965: ...P A R T 2 Configuring Logging SNMP and Smart Call Home ...
Page 1966: ......
Page 2059: ...P A R T 2 System Administration ...
Page 2060: ......
Page 2098: ...1 8 Cisco ASA Series CLI Configuration Guide Chapter 1 Troubleshooting Viewing the Coredump ...
Page 2099: ...P A R T 2 Reference ...
Page 2100: ......