Dynamic Nat And Pat Implementation - Cisco Catalyst 6500 Series Configuration Manual

Chapter 9 Configuring Network Address Translation
Using Dynamic NAT and PAT

Dynamic NAT and PAT Implementation

For dynamic NAT and PAT, you first configure a NAT statement (the nat command) identifying the
addresses on a given interface that you want to translate. Then you configure a separate global statement
(the global command) to specify the translated addresses when exiting another interface (in the case of
PAT, this is one address). Each NAT statement matches a global statement by comparing the NAT ID, a
number that you assign each statement (see Figure 9-8).
Figure 9-8 NAT and Global ID Matching
Web Server:
www.cisco.com
Outside
Global 1: 209.165.201.3-
209.165.201.10
Source Addr Translation
10.1.2.27 209.165.201.3
NAT 1: 10.1.2.0/24
Inside
10.1.2.27
See the following commands for this example:
FWSM/contexta(config)# nat (inside) 1 10.1.2.0 255.255.255.0
FWSM/contexta(config)# global (outside) 1 209.165.201.3-209.165.201.10
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
9-17
OL-6392-01