Chapter 16
Configuring NAT
Using Dynamic NAT and PAT
Dynamic NAT and PAT Implementation
For dynamic NAT and PAT, you first configure a nat command identifying the real addresses on a given
interface that you want to translate. Then you configure a separate global command to specify the
mapped addresses when exiting another interface (in the case of PAT, this is one address). Each nat
command matches a global command by comparing the NAT ID, a number that you assign to each
command. (See
Figure
16-14.)
Figure 16-14
nat and global ID Matching
Web Server:
www.cisco.com
Outside
Global 1: 209.165.201.3-
209.165.201.10
Translation
10.1.2.27
209.165.201.3
NAT 1: 10.1.2.0/24
Inside
10.1.2.27
See the following commands for this example:
hostname(config)# nat (inside) 1 10.1.2.0 255.255.255.0
hostname(config)# global (outside) 1 209.165.201.3-209.165.201.10
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
16-20
OL-20748-01