5-21
Cisco ASA Series Firewall ASDM Configuration Guide
Chapter 5 Configuring Twice NAT (ASA 8.3 and Later)
Configuring Twice NAT
Step 5 Choose Static from the Match Criteria: Translated Packet > Source NAT Type drop-down list. Static is
the default setting.
This setting only applies to the source address; the destination translation is always static.
Step 6 Identify the translated packet addresses, either IPv4 or IPv6; namely, the packet addresses as they appear
on the destination interface network (the mapped source address and the real destination address). You
can translate between IPv4 and IPv6 if desired. See the following figure for an example of the original
packet vs. the translated packet.
a. For the Match Criteria: Translated Packet > Source Address, click the browse button and choose an
existing network object or group or create a new object or group from the Browse Translated Source
Address dialog box.
Real: 192.168.1.1
Mapped: 10.1.1.1
Real: 10.1.2.2
Mapped: 192.168.2.2
NAT
Source Destination
Outside
Inside
10.1.2.2 ---> 10.1.1.1 192.168.2.2 ---> 192.168.1.1
Original Packet Translated Packet