34-25
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter 34 Configuring Twice NAT (ASA 8.3 and Later)
Configuring Twice NAT
Step 5 Choose Static from the Match Criteria: Translated Packet > Source NAT Type drop-down list. Static is
the default setting.
This setting only applies to the source address; the destination translation is always static.
Step 6 Identify the translated packet addresses; namely, the packet addresses as they appear on the destination
interface network (the mapped source address and the real destination address). See the following figure
for an example of the original packet vs. the translated packet where you perform identity NAT on the
inside host but translate the outside host.
a. For the Match Criteria: Translated Packet > Source Address, click the browse button and choose
the same network object or group from the Browse Translated Source Address dialog box that you
chose for the real source address. Use any if you specified any for the real address.
b. For the Match Criteria: Translated Packet > Destination Address, click the browse button and
choose an existing network object, group, or interface or create a new object or group from the
Browse Translated Destination Address dialog box.
Real: 192.168.1.1
Mapped: 10.1.1.1
10.1.2.2
Identity
NAT
Outside
Inside
10.1.2.2 ---> 10.1.1.1 10.1.2.2 ---> 192.168.1.1
Original Packet Translated Packet
Source Destination
