27-14
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 27 Configuring Network Object NAT
Configuring Network Object NAT
You can type either a port number or a well-known port name (such as “ftp”).
You return to the Add/Edit Network Object dialog box.
Step 8 Click OK, and then Apply.
Because static rules are bidirectional (allowing initiation to and from the real host), the NAT Rules table
show two rows for each static rule, one for each direction (see Figure 27-21).
Figure 27-21 Bidirectional Rules in the NAT Rules Table
Configuring Identity NAT
This section describes how to configure an identity NAT rule using network object NAT. For more
information, see the “Identity NAT” section on page 26-11.
Detailed Steps
Step 1 You can add NAT to a new or existing network object:
• To add a new network object, choose Configuration > Firewall > NAT Rules, then click Add >
Add Network Object NAT Rule.
Figure 27-22 Adding a Network Object NAT Rule
•
To add NAT to an existing network object, choose Configuration > Firewall > Objects > Network
Objects/Groups, and then double-click a named network object. (Non-named network objects
cannot be configured for NAT. Named network object icons have dark blue accents, and non-named
network object icons have green accents and the word “IP”.)