CISCO ASA 8.4 NAT配置示例

《CISCO ASA 8.4 NAT配置示例》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、1、静态NATStep1Createanetworkobjectfortheinternalwebserver:hostname(config)#objectnetworkmyWebServStep2Definethewebserveraddress:hostname(config-network-object)#host10.1.2.27Step3ConfigurestaticNATfortheobject:hostname(config-network-object)#nat(inside,outs

2、ide)static209.165.201.102、动态NATStep1CreateanetworkobjectforthedynamicNATpooltowhichyouwanttotranslatetheinsideaddresses:hostname(config)#objectnetworkmyNatPoolhostname(config-network-object)#range209.165.201.20209.165.201.30Step2Createanetworkobjectforth

3、einsidenetwork:hostname(config)#objectnetworkmyInsNethostname(config-network-object)#subnet10.1.2.0255.255.255.0Step3EnabledynamicNATfortheinsidenetwork:hostname(config-network-object)#nat(inside,outside)dynamicmyNatPoolStep4Createanetworkobjectfortheout

4、sidewebserver:hostname(config)#objectnetworkmyWebServStep5Definethewebserveraddress:hostname(config-network-object)#host209.165.201.12Step6ConfigurestaticNATforthewebserver:hostname(config-network-object)#nat(outside,inside)static10.1.2.203、端口NATStep1Cre

5、ateanetworkobjectfortheFTPserveraddress:hostname(config)#objectnetworkFTP_SERVERStep2DefinetheFTPserveraddress,andconfigurestaticNATwithidentityporttranslationfortheFTPserver:hostname(config-network-object)#host10.1.2.27hostname(config-network-object)#na

6、t(inside,outside)static209.165.201.3servicetcpftpftpStep3CreateanetworkobjectfortheHTTPserveraddress:hostname(config)#objectnetworkHTTP_SERVERStep4DefinetheHTTPserveraddress,andconfigurestaticNATwithidentityporttranslationfortheHTTPserver:hostname(config

7、-network-object)#host10.1.2.28hostname(config-network-object)#nat(inside,outside)static209.165.201.3servicetcphttphttpStep5CreateanetworkobjectfortheSMTPserveraddress:hostname(config)#objectnetworkSMTP_SERVERStep6DefinetheSMTPserveraddress,andconfigurest

8、aticNATwithidentityporttranslationfortheSMTPserver:hostname(config-network-object)#host10.1.2.29hostname(config-network-object)#nat(inside,outside)static209.165.201.3servicetcpsmtpsmtp