Cisco ASA Series Cli Configuration Manual page 799

Chapter 1 Configuring Network Object NAT
Providing Access to an Inside Web Server (Static NAT)
The following example performs static NAT for an inside web server. The real address is on a private
network, so a public address is required. Static NAT is necessary so hosts can initiate traffic to the web
server at a fixed address. (See
Figure 1-1
10.1.2.27
Step 1
Create a network object for the internal web server:
hostname(config)# object network myWebServ
Step 2
Define the web server address:
hostname(config-network-object)# host 10.1.2.27
Step 3
Configure static NAT for the object:
hostname(config-network-object)# nat (inside,outside) static 209.165.201.10
NAT for Inside Hosts (Dynamic NAT) and NAT for an Outside Web Server
(Static NAT)
The following example configures dynamic NAT for inside users on a private network when they access
the outside. Also, when inside users connect to an outside web server, that web server address is
translated to an address that appears to be on the inside network. (See
Figure
Static NAT for an Inside Web Server
Undo Translation
209.165.201.10
Configuration Examples for Network Object NAT
1-1).
209.165.201.12
Outside
209.165.201.1
Security
Appliance
10.1.2.1
Inside
myWebServ
10.1.2.27
Cisco ASA Series CLI Configuration Guide
Figure 1-2).
1-19