Filter
Top Products
5-27
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter 5 Configuring Twice NAT (ASA 8.3 and Later)
Configuring Twice NAT
Step 5 Choose Static from the Match Criteria: Translated Packet > Source NAT Type drop-down list. Static is
the default setting.
This setting only applies to the source address; the destination translation is always static.
Step 6 Identify the translated packet addresses; namely, the packet addresses as they appear on the destination
interface network (the mapped source address and the real destination address). See the following figure
for an example of the original packet vs. the translated packet where you perform identity NAT on the
inside host but translate the outside host.
a. For the Match Criteria: Translated Packet > Source Address, click the browse button and choose the
same network object or group from the Browse Translated Source Address dialog box that you chose
for the real source address. Use any if you specified any for the real address.
b. For the Match Criteria: Translated Packet > Destination Address, click the browse button and choose
an existing network object, group, or interface or create a new object or group from the Browse
Translated Destination Address dialog box.
Real: 192.168.1.1
Mapped: 10.1.1.1
10.1.2.2
Identity
NAT
Outside
Inside
10.1.2.2 ---> 10.1.1.1 10.1.2.2 ---> 192.168.1.1
Original Packet Translated Packet
Source Destination