Cisco Cisco ASA 5580 Adaptive Security Appliance Technical Manual

Cisco

18

XML Examples for the Cisco Application Centric Infrastructure Security Device Package

Network Address Translation

<vnsDevParam key="event_destination" name="dest" value="1.2.3.4"/>

</vnsDevFolder>

</vnsDevFolder>

</vnsDevFolder>

</vnsDevFolder>

</vnsLDevVip>

</fvTenant>

</polUni>

Network Address Translation

This XML example sets up the Network Address Translation (NAT) feature on the external interface,
based on the previously created network objects, ilinux1 and olinux1.

ASA Configuration

nat (externalIf,internalIf) source static ilinux1 olinux1

XML Example

<polUni>

<fvTenant name="tenant1">

<vnsAbsGraph name = "WebGraph">

<vnsAbsNode name = "FW1">

<vnsAbsDevCfg>

<vnsAbsFolder key="NATList" name="ListA">

<vnsAbsFolder key="NATRule" name="RuleA">

<vnsAbsParam key="order" name="order" value="3"/>

<vnsAbsFolder key="source_translation" name="source_trans">

<vnsAbsFolder key="mapped_object" name="mapped_object">

<vnsAbsCfgRel key="object_name" name="map_name" targetName="olinux1"/>

</vnsAbsFolder>

<vnsAbsFolder key="real_object" name="real_object">

<vnsAbsCfgRel key="object_name" name="real_name" targetName="ilinux1"/>

</vnsAbsFolder>

<vnsAbsParam key="nat_type" name="nat_type" value="static"/>

</vnsAbsFolder>

</vnsAbsFolder>

</vnsAbsFolder>

</vnsAbsDevCfg>

<vnsAbsFuncCfg>

<vnsAbsFolder key="NATPolicy" name="PolicyA">

<vnsAbsCfgRel key="nat_list_name" name="nat_listA" targetName="ListA"/>

</vnsAbsFolder>

</vnsAbsFuncCfg>

</vnsAbsNode>

</vnsAbsGraph>

</fvTenant>

</polUni>