Translating The Public Address Of The Web Server To Its Real Address On The Inside Interface - Cisco 5510 - ASA SSL / IPsec VPN Edition Getting Started Manual

Configuring the Adaptive Security Appliance for a DMZ Deployment
Translating the Public Address of the Web Server to its Real Address on the Inside
Interface
Step 1
Step 2
Note
Step 3
Step 4
Step 5
Cisco ASA 5500 Series Getting Started Guide
8-14
To configure a NAT rule that translates the public IP address of the web server to
its real IP address, perform the following steps:
In the Configuration > Firewall > NAT Rules pane, click the green + (plus) icon
and choose and choose Add "Network Object" NAT Rule.
The Add Network Object dialog box appears.
Fill in the following values:
In the Name field, enter the object name. Use characters a to z, A to Z, 0 to
•
9, a period, a dash, a comma, or an underscore. The name must be 64
characters or less.
From the Type drop-down list, choose Host.
•
In the IP Address field, enter the real (private) address of the DMZ web
•
server. In this scenario, the IP address is 10.30.30.30.
(Optional) In the Description field, enter a description of the network object
•
(up to 200 characters in length).
If the NAT section is hidden, click NAT to expand the section.
Check the Add Automatic Translation Rules check box.
From the Type drop-down list, choose Static.
In the Translated Addr. field, enter the public address (or mapped address) of the
DMZ web server, or click ..., and choose an the address from the Browse
Translated Addr dialog box. In this scenario, the IP address is 209.165.200.225.
Chapter 8 Scenario: DMZ Configuration
78-19186-01