Cisco ASA 5505 Configuration Manual page 588

Configuration Examples for Twice NAT
Different Translation Depending on the Destination Address and Port (Dynamic
PAT)
Figure 28-55
a single host for both web services and Telnet services. When the host accesses the server for web
services, the real address is translated to 209.165.202.129:port. When the host accesses the same server
for Telnet services, the real address is translated to 209.165.202.130:port.
Figure 28-55
10.1.2.27:80
Step 1 Add a NAT rule for traffic from the inside network to the Telnet server:
Figure 28-56
By default, the NAT rule is added to the end of section 1. If you want to add a NAT rule to section 3,
after the network object NAT rules, choose Add NAT Rule After Network Object NAT Rules.
Cisco ASA 5500 Series Configuration Guide using ASDM
28-28
shows the use of source and destination ports. The host on the 10.1.2.0/24 network accesses
Twice NAT with Different Destination Ports
Web and Telnet server:
209.165.201.11
Internet
Translation
209.165.202.129
Inside
Web Packet
Dest. Address:
209.165.201.11:80
10.1.2.27
Adding a NAT Rule
Translation
10.1.2.27:23 209.165.202.130
10.1.2.0/24
Telnet Packet
Dest. Address:
209.165.201.11:23
Chapter 28 Configuring Twice NAT
OL-20339-01