Cisco ASA 5540 User Manual

1-18
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring Twice NAT
Configuring Twice NAT
Configuring Static NAT or Static NAT-with-Port-Translation
This section describes how to configure a static NAT rule using twice NAT. For more information about
static NAT, see the “Static NAT” section on page 1-3.
Detailed Steps
Command Purpose
Step 1
Create network objects or groups for the:
• Source real addresses
• Source mapped addresses
• Destination real addresses
• Destination mapped addresses
See the “Adding Network Objects for Real and Mapped
Addresses” section on page 1-4.
If you want to configure source static interface NAT with port
translation only, you can skip adding an object for the source
mapped addresses, and instead specify the interface keyword in
the nat command.
If you want to configure destination static interface NAT with port
translation only, you can skip adding an object for the destination
mapped addresses, and instead specify the interface keyword in
the nat command.
Step 2
(Optional) Create service objects for the:
• Source or Destination real ports
• Source or Destination mapped ports
See the “(Optional) Adding Service Objects for Real and Mapped
Ports” section on page 1-6.

Cisco ASA 5540 Specifications

General

Brand	Cisco
Model	ASA 5540
Category	Firewall
Language	English