EasyManuals Logo

Cisco ASA Series User Manual

Cisco ASA Series
2164 pages
To Next Page IconTo Next Page
To Next Page IconTo Next Page
To Previous Page IconTo Previous Page
To Previous Page IconTo Previous Page
Page #821 background imageLoading...
Page #821 background image
1-9
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Twice NAT
Configuring Twice NAT
Step 3
nat [(real_ifc,mapped_ifc)]
[line |{after-auto [line]}]
source dynamic {real_obj | any}
{mapped_obj [interface [ipv6]]}
[destination static {mapped_obj |
interface [ipv6]} real_obj]
[service mapped_dest_svc_obj
real_dest_svc_obj] [dns] [unidirectional]
[inactive] [description desc]
Example:
hostname(config)# nat (inside,outside)
source dynamic MyInsNet NAT_POOL
destination static Server1_mapped Server1
service MAPPED_SVC REAL_SVC
Configure dynamic NAT. See the following guidelines:
Interfaces—(Required for transparent mode) Specify the real
and mapped interfaces. Be sure to include the parentheses in
your command. In routed mode, if you do not specify the real
and mapped interfaces, all interfaces are used; you can also
specify the keyword any for one or both of the interfaces.
Section and Line—(Optional) By default, the NAT rule is
added to the end of section 1 of the NAT table (see the “NAT
Rule Order” section on page 1-18). If you want to add the rule
into section 3 instead (after the network object NAT rules),
then use the after-auto keyword. You can insert a rule
anywhere in the applicable section using the line argument.
Source addresses:
Real—Specify a network object, group, or the any
keyword.
Mapped—Specify a different network object or group.
You can optionally configure the following fallback
method:
Interface PAT fallback—(Routed mode only) The
interface keyword enables interface PAT fallback. If you
specify ipv6, then the IPv6 address of the interface is
used. After the mapped IP addresses are used up, then the
IP address of the mapped interface is used. For this
option, you must configure a specific interface for the
mapped_ifc.
Command Purpose

Table of Contents

Other manuals for Cisco ASA Series

Questions and Answers:

Question and Answer IconNeed help?

Do you have a question about the Cisco ASA Series and is the answer not in the manual?

Cisco ASA Series Specifications

General IconGeneral
ModelASA 5505
InterfacesVaries by model (Fast Ethernet, Gigabit Ethernet, 10 Gigabit Ethernet, etc.)
High AvailabilityActive/Standby or Active/Active (varies by model)
Power SupplyVaries by model
Form FactorVaries by model
Operating SystemCisco ASA Software
IPsec VPNSupported
SSL VPNSupported
IPS ThroughputVaries by model

Related product manuals