Examples For Twice Nat; Different Translation Depending On The Destination (Dynamic Twice Pat) - Cisco ASA Series Configuration Manual

Examples for Twice NAT

hostname(config)# object network SMTP_SERVER
hostname(config-network-object)# host 10.1.2.29
hostname(config-network-object)# nat (inside,outside) static 209.165.201.3 service tcp
smtp smtp
Examples for Twice NAT
This section includes the following configuration examples:
•
•
•

Different Translation Depending on the Destination (Dynamic Twice PAT)

The following figure shows a host on the 10.1.2.0/24 network accessing two different servers. When the
host accesses the server at 209.165.201.11, the real address is translated to 209.165.202.129:port. When
the host accesses the server at 209.165.200.225, the real address is translated to 209.165.202.130:port.
Figure 10-5
10.1.2.27
Procedure
Add a network object for the inside network:
Step 1
Cisco ASA Series Firewall CLI Configuration Guide
10-6
Different Translation Depending on the Destination (Dynamic Twice PAT), page 10-6
Different Translation Depending on the Destination Address and Port (Dynamic PAT), page 10-7
Example: Twice NAT with Destination Address Translation, page 10-9
Twice NAT with Different Destination Addresses
Server 1
209.165.201.11
209.165.201.0/27
Translation
209.165.202.129
Packet
Dest. Address:
209.165.201.11
Server 2
209.165.200.225
209.165.200.224/27
DMZ
Translation
10.1.2.27 209.165.202.130
Inside
10.1.2.0/24
Packet
Dest. Address:
209.165.200.225
10.1.2.27
Chapter 10 NAT Examples and Reference