9-17
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
OL-6392-01
Chapter 9 Configuring Network Address Translation
Using Dynamic NAT and PAT
Dynamic NAT and PAT Implementation
For dynamic NAT and PAT, you first configure a NAT statement (the nat command) identifying the
addresses on a given interface that you want to translate. Then you configure a separate global statement
(the global command) to specify the translated addresses when exiting another interface (in the case of
PAT, this is one address). Each NAT statement matches a global statement by comparing the NAT ID, a
number that you assign each statement (see Figure 9-8).
Figure 9-8 NAT and Global ID Matching
See the following commands for this example:
FWSM/contexta(config)# nat (inside) 1 10.1.2.0 255.255.255.0
FWSM/contexta(config)# global (outside) 1 209.165.201.3-209.165.201.10
104673
Web Server:
www.cisco.com
Outside
Inside
Global 1: 209.165.201.3-
209.165.201.10
NAT 1: 10.1.2.0/24
10.1.2.27
Source Addr Translation
209.165.201.310.1.2.27