Cisco ASA 5506-X Configuration Manual page 124

DNS and NAT
Figure 5-21 DNS64 Reply Modification Using Outside NAT
2
209.165.200.225
3
DNS Reply Modification
209.165.200.225 2001:DB8::D1A5:C8E1
Procedure
Step 1 Create a network object for the FTP server and configure static NAT with DNS modification. Because
this is a one-to-one translation, include the net-to-net option for NAT46.
hostname(config)# object network FTP_SERVER
hostname(config-network-object)# host 209.165.200.225
hostname(config-network-object)# nat (outside,inside) static 2001:DB8::D1A5:C8E1/128
net-to-net dns
Create a network object for the DNS server and configure static NAT. Include the net-to-net option for
Step 2
NAT46.
hostname(config)# object network DNS_SERVER
hostname(config-network-object)# host 209.165.201.15
hostname(config-network-object)# nat (outside,inside) static 2001:DB8::D1A5:C90F/128
net-to-net
Step 3 Configure an IPv4 PAT pool for translating the inside IPv6 network.
hostname(config)# object network IPv4_POOL
hostname(config-network-object)# range 203.0.113.1 203.0.113.254
Cisco ASA Series Firewall CLI Configuration Guide
5-26
DNS Server
209.165.201.15
Static Translation on Inside to:
2001:DB8::D1A5:C90F
1
DNS Query
ftp.cisco.com?
DNS Reply
4
DNS Reply
2001:DB8::D1A5:C8E1
PAT Translation on Outside to:
ftp.cisco.com
209.165.200.225
Static Translation on Inside to:
2001:DB8::D1A5:C8E1
209.165.200.225
IPv4 Internet
Dest Addr. Translation
2001:DB8::D1A5:C8E1
ASA
5
FTP Request
2001:DB8::D1A5:C8E1
IPv6 Net
User:
2001:DB8::1
209.165.200.230
Chapter 5 NAT Examples and Reference
7
FTP Request
6
209.165.200.225