global-address: outside address
permit-inside: permits intranet users to access the local-ip host using global-ip.
netmask mask: network-segment-to-network-segment address
match interface: specifies the egress interface.
Configure ip nat inside on the inside interface.
Configure ip nat outside on the outside interface.
Configure a dynamic NAT rule.
Configure special NAT applications.
A#configure terminal
A(config)# interface GigabitEthernet 0/0
A(config-if-GigabitEthernet 0/0)# ip address 192.168.1.1 255.255.255.0
A(config-if-GigabitEthernet 0/0)# ip nat inside
A(config-if-GigabitEthernet 0/0)# exit
A(config)# interface GigabitEthernet 0/1
A(config-if-GigabitEthernet 0/1)# ip address 200.168.12.1 255.255.255.0
A(config-if-GigabitEthernet 0/1)# ip nat outside
A(config-if-GigabitEthernet 0/1.)# exit
A(config)# ip nat pool net200 200.168.12.2 200.168.12.10 netmask 255.255.255.0
A(config)# ip nat inside source list 1 pool net200
A(config)# access-list 1 permit 192.168.12.0 0.0.0.255
A(config)# ip nat application source list 1 destination udp 192.168.1.1 53 dest-change
202.101.98.55 53
A(config)# access-list 1 permit 192.168.1.0 0.0.0.255