Cisco ASA 5512-X Configuration Guide

10-26
Cisco ASA Series Firewall CLI Configuration Guide
Chapter 10 NAT Examples and Reference
DNS and NAT
Figure 10-21 DNS64 Reply Modification Using Outside NAT
Procedure
Step 1 Create a network object for the FTP server and configure static NAT with DNS modification. Because
this is a one-to-one translation, include the net-to-net option for NAT46.
hostname(config)# object network FTP_SERVER
hostname(config-network-object)# host 209.165.200.225
hostname(config-network-object)# nat (outside,inside) static 2001:DB8::D1A5:C8E1/128
net-to-net dns
Step 2 Create a network object for the DNS server and configure static NAT. Include the net-to-net option for
NAT46.
hostname(config)# object network DNS_SERVER
hostname(config-network-object)# host 209.165.201.15
hostname(config-network-object)# nat (outside,inside) static 2001:DB8::D1A5:C90F/128
net-to-net
Step 3 Configure an IPv4 PAT pool for translating the inside IPv6 network.
hostname(config)# object network IPv4_POOL
hostname(config-network-object)# range 203.0.113.1 203.0.113.254
ftp.cisco.com
209.165.200.225
IPv4 Internet
IPv6 Net
Static Translation on Inside to:
2001:DB8::D1A5:C8E1
PAT Translation on Outside to:
209.165.200.230
User:
2001:DB8::1
DNS Server
209.165.201.15
Static Translation on Inside to:
2001:DB8::D1A5:C90F
1
2
7
6
5
4
3
DNS Query
ftp.cisco.com?
DNS Reply
209.165.200.225
DNS Reply Modification
209.165.200.225 2001:DB8::D1A5:C8E1
DNS Reply
2001:DB8::D1A5:C8E1
FTP Request
209.165.200.225
Dest Addr. Translation
209.165.200.2252001:DB8::D1A5:C8E1
FTP Request
2001:DB8::D1A5:C8E1
ASA
333368

Cisco ASA 5512-X Specifications

General

Firewall Throughput	1.2 Gbps
VPN Throughput	200 Mbps
Maximum VPN Peers	250
Integrated IPS	Yes
IPS Throughput	250 Mbps
RAM	4 GB
Power Supply	AC, 100-240V
Security Contexts	2 (Standard), 50 (with Security Contexts license)
Interfaces	6 x Gigabit Ethernet
Dimensions (H x W x D)	1.75 x 17.5 x 14.5 inches
Weight	16 lbs