Cisco Catalyst 6500 Series Configuration Manual page 163

Chapter 9 Configuring Network Address Translation
You can also enter a global statement for each interface using the same NAT ID. If you enter a global
statement for the Outside and DMZ interfaces on ID 1, then the Inside NAT statement identifies traffic
to be translated when going to both the Outside and the DMZ interfaces. Similarly, if you also enter a
NAT statement for the DMZ interface on ID 1, then the global statement on the Outside interface is also
used for DMZ traffic. (See
Figure 9-10 Global and NAT Statements on Multiple Interfaces
Source Addr Translation
10.1.2.27
See the following commands for this example:
FWSM/contexta(config)# nat (inside) 1 10.1.2.0 255.255.255.0
FWSM/contexta(config)# nat (dmz) 1 10.1.1.0 255.255.255.0
FWSM/contexta(config)# global (outside) 1 209.165.201.3-209.165.201.10
FWSM/contexta(config)# global (dmz) 1 10.1.1.23
OL-6392-01
Figure
Web Server:
www.cisco.com
Outside
209.165.201.3
Inside
10.1.2.27
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
9-10).
Source Addr Translation
10.1.1.15
Global 1: 209.165.201.3-
209.165.201.10
NAT 1: 10.1.1.0/24
Global 1: 10.1.1.23
NAT 1: 10.1.2.0/24
Source Addr Translation
10.1.2.27
Using Dynamic NAT and PAT
209.165.201.4
DMZ
10.1.1.15
10.1.1.23:2024
9-19