Cisco ASA 5508-X, Configuration Manual

Page: 188 / 428

9-30
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 9 Network Address Translation (NAT)
Static NAT
The following figure shows a typical one-to-many static NAT scenario. Because initiation by the real
host always uses the first mapped address, the translation of real host IP/1st mapped IP is technically the
only bidirectional translation.
Figure 9-8 One-to-Many Static NAT
For example, you have a load balancer at 10.1.2.27. Depending on the URL requested, it redirects traffic
to the correct web server. For details on how to configure this example, see
Inside Load Balancer with
Multiple Mapped Addresses (Static NAT, One-to-Many), page 10-4 .
Figure 9-9 One-to-Many Static NAT Example
10.1.2.27
10.1.2.27
10.1.2.27
209.165.201.3
In s ide O u t s ide
209.165.201.4
209.165.201.5
S ec u rity
Appli a nce
24
8
771
Ho s t
O u t s ide
In s ide
Lo a d B a l a ncer
10.1.2.27
We b S erver s
Undo Tr a n s l a tion
10.1.2.27 209.165.201.3
Undo Tr a n s l a tion
10.1.2.27 209.165.201.4
Undo Tr a n s l a tion
10.1.2.27 209.165.201.5
24
8
633