Cisco 7604 Configuration Manual page 325

Chapter 16 Configuring NAT
You can enter multiple nat commands using the same NAT ID on one or more interfaces; they all use the
same global command when traffic exits a given interface. For example, you can configure nat
commands for Inside and DMZ interfaces, both on NAT ID 1. Then you configure a global command on
the Outside interface that is also on ID 1. Traffic from the Inside interface and the DMZ interface share
a mapped pool or a PAT address when exiting the Outside interface. (See
Figure 16-15
192.168.1.5
See the following commands for this example:
hostname(config)# nat (inside) 1 10.1.2.0 255.255.255.0
hostname(config)# nat (inside) 1 192.168.1.0 255.255.255.0
hostname(config)# nat (dmz) 1 10.1.1.0 255.255.255.0
hostname(config)# global (outside) 1 209.165.201.3-209.165.201.10
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
nat Commands on Multiple Interfaces
Translation
10.1.2.27 209.165.201.3
Translation
209.165.201.5
10.1.2.27
Web Server:
www.cisco.com
Outside
10.1.1.15
Global 1: 209.165.201.3-
209.165.201.10
NAT 1: 10.1.1.0/24
NAT 1: 10.1.2.0/24
NAT 1: 192.168.1.0/24
Inside
Network
2
192.168.1.5
Using Dynamic NAT and PAT
Figure 16-15.)
Translation
209.165.201.4
DMZ
10.1.1.15
16-21