5-6
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 5 NAT Examples and Reference
Examples for Twice NAT
hostname(config)#
object network SMTP_SERVER
hostname(config-network-object)#
host 10.1.2.29
hostname(config-network-object)#
nat (inside,outside) static 209.165.201.3 service tcp
smtp smtp
Examples for Twice NAT
This section includes the following configuration examples:
•
Different Translation Depending on the Destination (Dynamic Twice PAT), page 5-6
•
Different Translation Depending on the Destination Address and Port (Dynamic PAT), page 5-7
•
Example: Twice NAT with Destination Address Translation, page 5-9
Different Translation Depending on the Destination (Dynamic Twice PAT)
The following figure shows a host on the 10.1.2.0/24 network accessing two different servers. When the
host accesses the server at 209.165.201.11, the real address is translated to 209.165.202.129:
port
. When
the host accesses the server at 209.165.200.225, the real address is translated to 209.165.202.130:
port
.
Figure 5-5
Twice NAT with Different Destination Addresses
Step 1
Add a network object for the inside network:
hostname(config)#
object network myInsideNetwork
hostname(config-network-object)#
subnet 10.1.2.0 255.255.255.0
S
erver 1
209.165.201.11
S
erver 2
209.165.200.225
DMZ
In
s
ide
10.1.2.27
10.1.2.0/24
1
3
00
3
9
209.165.201.0/27
209.165.200.224/27
Tr
a
n
s
l
a
tion
209.165.202.129
10.1.2.27
Tr
a
n
s
l
a
tion
209.165.202.1
3
0
10.1.2.27
P
a
cket
De
s
t. Addre
ss
:
209.165.201.11
P
a
cket
De
s
t. Addre
ss
:
209.165.200.225
Содержание ASA 5512-X
Страница 5: ...P A R T 1 Service Policies and Access Control ...
Страница 6: ......
Страница 50: ...3 14 Cisco ASA Series Firewall CLI Configuration Guide Chapter 3 Access Rules History for Access Rules ...
Страница 51: ...P A R T 2 Network Address Translation ...
Страница 52: ......
Страница 126: ...5 28 Cisco ASA Series Firewall CLI Configuration Guide Chapter 5 NAT Examples and Reference DNS and NAT ...
Страница 127: ...P A R T 3 Application Inspection ...
Страница 128: ......
Страница 255: ...P A R T 4 Connection Settings and Quality of Service ...
Страница 256: ......
Страница 288: ...12 14 Cisco ASA Series Firewall CLI Configuration Guide Chapter 12 Quality of Service History for QoS ...
Страница 303: ...P A R T 5 Advanced Network Protection ...
Страница 304: ......
Страница 339: ...P A R T 6 ASA Modules ...
Страница 340: ......
Страница 398: ...17 28 Cisco ASA Series Firewall CLI Configuration Guide Chapter 17 ASA CX Module History for the ASA CX Module ...