9-30
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 9 Network Address Translation (NAT)
Static NAT
The following figure shows a typical one-to-many static NAT scenario. Because initiation by the real
host always uses the first mapped address, the translation of real host IP/1st mapped IP is technically the
only bidirectional translation.
Figure 9-8 One-to-Many Static NAT
For example, you have a load balancer at 10.1.2.27. Depending on the URL requested, it redirects traffic
to the correct web server. For details on how to configure this example, see Inside Load Balancer with
Multiple Mapped Addresses (Static NAT, One-to-Many), page 10-4.
Figure 9-9 One-to-Many Static NAT Example
10.1.2.27
10.1.2.27
10.1.2.27
209.165.201.3
Inside Outside
209.165.201.4
209.165.201.5
Security
Appliance
248771
Host
Outside
Inside
Load Balancer
10.1.2.27
Web Servers
Undo Translation
10.1.2.27209.165.201.3
Undo Translation
10.1.2.27209.165.201.4
Undo Translation
10.1.2.27209.165.201.5
248633