Dynamic Nat - Cisco ASA 5505 Configuration Manual

NAT Types
Figure 26-6
is always active so both translated and remote hosts can initiate connections, but the subsequent
mappings are unidirectional to the real hosts.
Figure 26-6
10.1.2.27
10.1.2.28
10.1.2.27
10.1.2.28
10.1.2.27
For a many-to-few or many-to-one configuration, where you have more real addresses than mapped
addresses, you run out of mapped addresses before you run out of real addresses. Only the initial
mappings result in bidirectional initiation. The remaining real addresses can initiate traffic, but traffic
cannot be initiated to them (returning traffic for a connection is directed to the correct real address
because of the unique 5-tuple (source IP, destination IP, source port, destination port, protocol) for the
connection).
Figure 26-7
address is always active so both translated and remote hosts can initiate connections, but the subsequent
mappings are unidirectional from the real hosts.
Figure 26-7
10.1.2.27
10.1.2.28
10.1.2.29
10.1.2.30
10.1.2.31
Instead of using a static rule this way, we suggest that you create a one-to-one rule for the traffic that
needs bidirectional initiation, and then create a dynamic rule for the rest of your addresses.

Dynamic NAT

This section describes dynamic NAT and includes the following topics:
•
•
Cisco ASA 5500 Series Configuration Guide using ASDM
26-8
shows a typical few-to-many static NAT scenario. The first translation for each real address
Few-to-Many Static NAT
Security
Appliance
209.165.201.3
209.165.201.4
209.165.201.5
209.165.201.6
209.165.201.7
Inside Outside
shows a typical many-to-few static NAT scenario. The first translation for each mapped
Many-to-Few Static NAT
Security
Appliance
209.165.201.3
209.165.201.4
209.165.201.3
209.165.201.4
209.165.201.3
Inside Outside
Information About Dynamic NAT, page 26-9
Dynamic NAT Disadvantages and Advantages, page 26-10
Chapter 26 Information About NAT
OL-20339-01