Filter
Top Products
5-8
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter 5 Configuring Twice NAT (ASA 8.3 and Later)
Configuring Twice NAT
Step 5 Choose Dynamic from the Match Criteria: Translated Packet > Source NAT Type drop-down list.
This setting only applies to the source address; the destination translation is always static.
Step 6 Identify the translated packet addresses, either IPv4 or IPv6; namely, the packet addresses as they appear
on the destination interface network (the mapped source address and the real destination address). You
can translate between IPv4 and IPv6 if desired. See the following figure for an example of the original
packet vs. the translated packet.
a. You can perform either dynamic NAT or Dynamic PAT using a PAT pool:
• Dynamic NAT—For the Match Criteria: Translated Packet > Source Address, click the browse
button and choose an existing network object or group or create a new object or group from the
Browse Translated Source Address dialog box.
For dynamic NAT, you typically configure a larger group of source addresses to be mapped to a
smaller group.
Real: 192.168.1.1
Mapped: 10.1.1.1
Real: 10.1.2.2
Mapped: 192.168.2.2
NAT
Source Destination
Outside
Inside
10.1.2.2 ---> 10.1.1.1 192.168.2.2 ---> 192.168.1.1
Original Packet Translated Packet