35-16
Cisco ASA 5500 Series Configuration Guide using ASDM
Chapter 35 Configuring NAT (ASA 8.2 and Earlier)
Using Dynamic NAT
Using Dynamic NAT
This section describes how to configure dynamic NAT, including dynamic NAT and PAT, dynamic policy
NAT and PAT, and identity NAT.
Policy NAT lets you identify real addresses for address translation by specifying the source and
destination addresses. You can also optionally specify the source and destination ports. Regular NAT can
only consider the source addresses, and not the destination. See the “Policy NAT” section on page 35-10
for more information.
This section includes the following topics:
• Dynamic NAT Implementation, page 35-16
• Managing Global Pools, page 35-21
• Configuring Dynamic NAT, PAT, or Identity NAT, page 35-22
• Configuring Dynamic Policy NAT or PAT, page 35-24
Dynamic NAT Implementation
This section describes how dynamic NAT is implemented, and includes the following topics:
• Real Addresses and Global Pools Paired Using a Pool ID, page 35-17
• NAT Rules on Different Interfaces with the Same Global Pools, page 35-17
• Global Pools on Different Interfaces with the Same Pool ID, page 35-18
• Multiple NAT Rules with Different Global Pools on the Same Interface, page 35-18
• Multiple Addresses in the Same Global Pool, page 35-19
• Outside NAT, page 35-20
• Real Addresses in a NAT Rule Must be Translated on All Lower or Same Security Interfaces,
page 35-21
