Filter
Top Products
6-31
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter 6 Configuring NAT (ASA 8.2 and Earlier)
Using Static NAT
Configuring Static Policy NAT, PAT, or Identity NAT
Figure 6-22 shows typical static policy NAT, static policy PAT, and static policy identity NAT scenarios.
The translation is always active so both translated and remote hosts can originate connections.
Figure 6-22 Static Policy NAT Scenarios
To configure static policy NAT, PAT, or identity NAT, perform the following steps:
Step 1 In the Configuration > Firewall > NAT Rules pane, choose Add > Advanced > Add Static Policy NAT
Rule.
The Add Static Policy NAT Rule dialog box appears.
Step 2 In the Original area, from the Interface drop-down list, choose the interface that is connected to the hosts
with real addresses that you want to translate.
Step 3 Enter the real addresses in the Source field, or click the ... button to choose an IP address that you already
defined in ASDM.
Specify the address and subnet mask using prefix/length notation, such as 10.1.1.0/24. If you enter an
IP address without a mask, it is considered to be a host address, even if it ends with a 0.
Step 4 Enter the destination addresses in the Destination field, or click the ... button to choose an IP address
that you already defined in ASDM.
Specify the address and subnet mask using prefix/length notation, such as 10.1.1.0/24. If you enter an
IP address without a mask, it is considered to be a host address, even if it ends with a 0.
Separate multiple destination addresses by a comma.
By default, the field shows any, which allows any destination address.
Step 5 In the Translated area, from the Interface drop-down list, choose the interface where you want to use the
mapped addresses.
10.1.1.1 209.165.201.1
Inside Outside
10.1.1.2 209.165.201.2
Security
Appliance
Static Policy NAT
Static Policy Identity NAT
Static Policy PAT
10.1.1.1:23 209.165.201.1:23
Inside Outside
10.1.1.2:8080 209.165.201.2:80
Security
Appliance
209.165.201.1 209.165.201.1
Inside Outside
209.165.201.2 209.165.201.2
Security
Appliance
191661