Download Print this page

Cisco ASA 5506-X Configuration Manual page 125

Cli
Hide thumbs Also See for ASA 5506-X:

Advertisement

Chapter 5
NAT Examples and Reference
Create a network object for the inside IPv6 network, and configure dynamic NAT with a PAT pool.
Step 4
hostname(config)# object network IPv6_INSIDE
hostname(config-network-object)# subnet 2001:DB8::/96
hostname(config-network-object)# nat (inside,outside) dynamic pat-pool IPv4_POOL
PTR Modification, DNS Server on Host Network
The following figure shows an FTP server and DNS server on the outside. The ASA has a static
translation for the outside server. In this case, when an inside user performs a reverse DNS lookup for
10.1.2.56, the ASA modifies the reverse DNS query with the real address, and the DNS server responds
with the server name, ftp.cisco.com.
Figure 5-22
Reverse DNS Query Modification
10.1.2.56
PTR Modification, DNS Server on Host Network
PTR Record
3
ftp.cisco.com
Reverse DNS Query
209.165.201.10
2
209.165.201.10
1
Reverse DNS Query
10.1.2.56?
ftp.cisco.com
209.165.201.10
Static Translation on Inside to:
10.1.2.56
DNS Server
4
Outside
ASA
Inside
User
10.1.2.27
Cisco ASA Series Firewall CLI Configuration Guide
DNS and NAT
5-27

Hide quick links:

Advertisement

loading