Cisco ASA Series Cli Configuration Manual page 778

DNS and NAT
Because you want inside users to use the mapped address for ftp.cisco.com (2001:DB8::D1A5:C8E1)
you need to configure DNS reply modification for the static translation. This example also includes a
static NAT translation for the DNS server, and a PAT rule for the inside IPv6 hosts.
Figure 1-25
209.165.200.225
Cisco ASA Series CLI Configuration Guide
1-32
DNS64 Reply Modification Using Outside NAT
Static Translation on Inside to:
2001:DB8::D1A5:C90F
DNS Query
ftp.cisco.com?
2
DNS Reply
209.165.200.225
3
DNS Reply Modification
2001:DB8::D1A5:C8E1
4
DNS Reply
2001:DB8::D1A5:C8E1
ftp.cisco.com
209.165.200.225
DNS Server
Static Translation on Inside to:
209.165.201.15
2001:DB8::D1A5:C8E1
1
IPv4 Internet
2001:DB8::D1A5:C8E1
Security Device
IPv6 Net
User:
2001:DB8::1
PAT Translation on Outside to:
209.165.200.230
Chapter 1 Information About NAT
7
FTP Request
209.165.200.225
6
Dest Addr. Translation
209.165.200.225
5
FTP Request
2001:DB8::D1A5:C8E1