Cisco 5510 - ASA SSL / IPsec VPN Edition Configuration Guide

27-35
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 27 Configuring Network Object NAT
Configuration Examples for Network Object NAT
Step 4 Click OK to return to the Edit Network Object dialog box, click OK again, and then click Apply.
DNS Server and Web Server on Mapped Interface, Web Server is Translated
(Static NAT with DNS Modification)
Figure 27-67 shows a web server and DNS server on the outside. The adaptive security appliance has a
static translation for the outside server. In this case, when an inside user requests the address for
ftp.cisco.com from the DNS server, the DNS server responds with the real address, 209.165.20.10.
Because you want inside users to use the mapped address for ftp.cisco.com (10.1.2.56) you need to
configure DNS reply modification for the static translation.
Figure 27-67 DNS Reply Modification Using Outside NAT
Step 1 Create a network object for the FTP server address:
ftp.cisco.com
209.165.201.10
DNS Server
Outside
Inside
User
10.1.2.27
Static Translation on Inside to:
10.1.2.56
130022
1
2
7
6
5
4
3
DNS Query
ftp.cisco.com?
DNS Reply
209.165.201.10
DNS Reply Modification
209.165.201.10 10.1.2.56
DNS Reply
10.1.2.56
FTP Request
209.165.201.10
Dest Addr. Translation
209.165.201.1010.1.2.56
FTP Request
10.1.2.56
Security
Appliance

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English