Cisco ASA Series Cli Configuration Manual page 805

Chapter 1 Configuring Network Object NAT
DNS Server and FTP Server on Mapped Interface, FTP Server is
Translated (Static NAT with DNS Modification)
Figure 1-6
outside server. In this case, when an inside user requests the address for ftp.cisco.com from the DNS
server, the DNS server responds with the real address, 209.165.201.10. Because you want inside users
to use the mapped address for ftp.cisco.com (10.1.2.56) you need to configure DNS reply modification
for the static translation.
Figure 1-6
3
DNS Reply Modification
209.165.201.10
Step 1
Create a network object for the FTP server address:
hostname(config)# object network FTP_SERVER
Step 2
Define the FTP server address, and configure static NAT with DNS modification:
hostname(config-network-object)# host 209.165.201.10
hostname(config-network-object)# nat (outside,inside) static 10.1.2.56 dns
shows an FTP server and DNS server on the outside. The ASA has a static translation for the
DNS Reply Modification Using Outside NAT
1
DNS Query
ftp.cisco.com?
2
DNS Reply
209.165.201.10
Appliance
10.1.2.56
4
DNS Reply
10.1.2.56
Configuration Examples for Network Object NAT
ftp.cisco.com
209.165.201.10
Static Translation on Inside to:
10.1.2.56
DNS Server
Outside
10.1.2.56
Security
FTP Request
Inside
User
10.1.2.27
Cisco ASA Series CLI Configuration Guide
7
FTP Request
209.165.201.10
6
Dest Addr. Translation
209.165.201.10
5
10.1.2.56
1-25