33-33
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter 33 Configuring Network Object NAT (ASA 8.3 and Later)
Configuration Examples for Network Object NAT
Step 9 Click Advanced to configure the real and mapped interfaces and port translation for SMTP.
Step 10 Click OK to return to the Edit Network Object dialog box, click OK again, and then click Apply.
DNS Server on Mapped Interface, Web Server on Real Interface (Static NAT
with DNS Modification)
For example, a DNS server is accessible from the outside interface. A server, ftp.cisco.com, is on the
inside interface. You configure the ASA to statically translate the ftp.cisco.com real address (10.1.3.14)
to a mapped address (209.165.201.10) that is visible on the outside network. (See Figure 33-5.) In this
case, you want to enable DNS reply modification on this static rule so that inside users who have access
to ftp.cisco.com using the real address receive the real address from the DNS server, and not the mapped
address.