Chapter 20
Using Modular Policy Framework
Figure 20-3
Mapped IP: 209.165.200.225
See the following commands for this example:
hostname(config)# static (inside,outside) 209.165.200.225 10.1.1.1
hostname(config)# access-list http_client extended permit tcp host 10.1.1.1 any eq 80
hostname(config)# class-map http_client
hostname(config-cmap)# match access-list http_client
hostname(config)# policy-map http_client
hostname(config-pmap)# class http_client
hostname(config-pmap-c)# inspect http
hostname(config)# service-policy http_client interface inside
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
OL-20748-01
HTTP Inspection with NAT
port 80
insp.
inside
Host
Real IP: 10.1.1.1
FWSM
outside
Modular Policy Framework Examples
Server
209.165.200.250
20-23