Cisco ASA Series Cli Configuration Manual page 802

Configuration Examples for Network Object NAT
Single Address for FTP, HTTP, and SMTP (Static
NAT-with-Port-Translation)
The following static NAT-with-port-translation example provides a single address for remote users to
access FTP, HTTP, and SMTP. These servers are actually different devices on the real network, but for
each server, you can specify static NAT-with-port-translation rules that use the same mapped IP address,
but different ports. (See
Figure 1-4
209.165.201.3:80
Step 1
Create a network object for the FTP server address:
hostname(config)# object network FTP_SERVER
Step 2
Define the FTP server address, and configure static NAT with identity port translation for the FTP server:
hostname(config-network-object)# host 10.1.2.27
hostname(config-network-object)# nat (inside,outside) static 209.165.201.3 service tcp ftp
ftp
Step 3
Create a network object for the HTTP server address:
hostname(config)# object network HTTP_SERVER
Step 4
Define the HTTP server address, and configure static NAT with identity port translation for the HTTP
server:
hostname(config-network-object)# host 10.1.2.28
hostname(config-network-object)# nat (inside,outside) static 209.165.201.3 service tcp
http http
Cisco ASA Series CLI Configuration Guide
1-22
Figure 1-4.)
Static NAT-with-Port-Translation
Undo Translation
209.165.201.3:21
Undo Translation
10.1.2.28
Chapter 1
Host
Outside
10.1.2.27
209.165.201.3:25
Inside
FTP server
10.1.2.27
HTTP server
10.1.2.28
Configuring Network Object NAT
Undo Translation
10.1.2.29
SMTP server
10.1.2.29