Chapter 8 Scenario: DMZ Configuration
Configuring the Adaptive Security Appliance for a DMZ Deployment
8-14
Cisco ASA 5500 Series Getting Started Guide
78-19186-01
Translating the Public Address of the Web Server to its Real Address on the Inside
Interface
To configure a NAT rule that translates the public IP address of the web server to
its real IP address, perform the following steps:
Step 1 In the Configuration > Firewall > NAT Rules pane, click the green + (plus) icon
and choose and choose Add “Network Object” NAT Rule.
The Add Network Object dialog box appears.
Step 2 Fill in the following values:
• In the Name field, enter the object name. Use characters a to z, A to Z, 0 to
9, a period, a dash, a comma, or an underscore. The name must be 64
characters or less.
• From the Type drop-down list, choose Host.
• In the IP Address field, enter the real (private) address of the DMZ web
server. In this scenario, the IP address is 10.30.30.30.
• (Optional) In the Description field, enter a description of the network object
(up to 200 characters in length).
Note If the NAT section is hidden, click NAT to expand the section.
Step 3 Check the Add Automatic Translation Rules check box.
Step 4 From the Type drop-down list, choose Static.
Step 5 In the Translated Addr. field, enter the public address (or mapped address) of the
DMZ web server, or click ..., and choose an the address from the Browse
Translated Addr dialog box. In this scenario, the IP address is 209.165.200.225.
To Next Page
Loading...
Need help?
General
