Cisco ASA 5506-X Configuration Manual page 58

Guidelines for NAT
The resultant ordering would be:
NAT Interfaces
In routed mode, you can configure a NAT rule to apply to any interface (in other words, all interfaces),
or you can identify specific real and mapped interfaces. You can also specify any interface for the real
address, and a specific interface for the mapped address, or vice versa.
For example, you might want to specify any interface for the real address and specify the outside
interface for the mapped address if you use the same private addresses on multiple interfaces, and you
want to translate them all to the same global pool when accessing the outside.
Figure 4-1
10.1.2.0
In transparent mode, you must choose specific source and destination interfaces.
Guidelines for NAT
The following topics provide detailed guidelines for implementing NAT.
•
•
Cisco ASA Series Firewall CLI Configuration Guide
4-6
192.168.1.0/24 (dynamic)
10.1.1.0/24 (static)
192.168.1.1/32 (static)
172.16.1.0/24 (dynamic) (object def)
172.16.1.0/24 (dynamic) (object abc)
192.168.1.1/32 (static)
10.1.1.0/24 (static)
192.168.1.0/24 (static)
172.16.1.0/24 (dynamic) (object abc)
172.16.1.0/24 (dynamic) (object def)
192.168.1.0/24 (dynamic)
Specifying Any Interface
209.165.201.1:xxxx
10.1.2.0
any
Eng
Firewall Mode Guidelines for NAT, page 4-7
IPv6 NAT Guidelines, page 4-7
Outside
Security
Appliance
10.1.2.0 10.1.2.0
Mktg HR
Chapter 4 Network Address Translation (NAT