Cisco ASA Series Configuration Manual page 207

Chapter 10 NAT Examples and Reference
Figure 10-2
10.1.2.10
209.165.201.12
Procedure
Create a network object for the dynamic NAT pool to which you want to translate the inside addresses.
Step 1
hostname(config)# object network myNatPool
hostname(config-network-object)# range 209.165.201.20 209.165.201.30
Create a network object for the inside network.
Step 2
hostname(config)# object network myInsNet
hostname(config-network-object)# subnet 10.1.2.0 255.255.255.0
Step 3 Enable dynamic NAT for the inside network using the dynamic NAT pool object.
hostname(config-network-object)# nat (inside,outside) dynamic myNatPool
Create a network object for the outside web server.
Step 4
hostname(config)# object network myWebServ
hostname(config-network-object)# host 209.165.201.12
Configure static NAT for the web server.
Step 5
hostname(config-network-object)# nat (outside,inside) static 10.1.2.20
Dynamic NAT for Inside, Static NAT for Outside Web Server
Translation
209.165.201.20
Undo Translation
10.1.2.20
Web Server
209.165.201.12
Outside
209.165.201.1
Security
Appliance
10.1.2.1
Inside
myInsNet
10.1.2.0/24
Cisco ASA Series Firewall CLI Configuration Guide
Examples for Network Object NAT
10-3