CHAPTER
 
28-1
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
28
Configuring Twice NAT
Twice NAT lets you identify both the source and destination address in a single rule. This chapter shows 
you how to configure twice NAT and includes the following sections:
• Information About Twice NAT, page 28-1
• Licensing Requirements for Twice NAT, page 28-1
• Prerequisites for Twice NAT, page 28-2
• Guidelines and Limitations, page 28-2
• Configuring Twice NAT, page 28-3
• Configuration Examples for Twice NAT, page 28-18
• Feature History for Twice NAT, page 28-37
Note For detailed information about how NAT works, see Chapter 26, “Information About NAT.”
Information About Twice NAT
Twice NAT lets you identify both the source and destination address in a single rule. Specifying both the 
source and destination addresses lets you specify that a source address should be translated to A when 
going to destination X, but be translated to B when going to destination Y, for example.
The destination address is optional. If you specify the destination address, you can either map it to itself 
(identity NAT), or you can map it to a different address. The destination mapping is always a static 
mapping.
Twice NAT also lets you use service objects for static NAT with port translation; network object NAT 
only accepts inline definition.
For detailed information about the differences between twice NAT and network object NAT, see the 
“How NAT is Implemented” section on page 26-15.
Twice NAT rules are added to section 1 of the NAT rules table, or if specified, section 3. For more 
information about NAT ordering, see the “NAT Rule Order” section on page 26-19.
Licensing Requirements for Twice NAT