Cisco Systems ASA 5585-X Manual De Usuario

Descargar
Página de 712
 
4-18
Cisco ASA Series Firewall CLI Configuration Guide
 
Chapter 4      Configuring Network Object NAT
  Configuration Examples for Network Object NAT
Configuration Examples for Network Object NAT
This section includes the following configuration examples:
show running-config nat
Shows the NAT configuration.
Note
You cannot view the NAT configuration using the show 
running-config object
 command. You cannot reference objects 
or object groups that have not yet been created in nat commands. 
To avoid forward or circular references in show command output, 
the show running-config command shows the object command 
two times: first, where the IP address(es) are defined; and later, 
where the nat command is defined. This command output 
guarantees that objects are defined first, then object groups, and 
finally NAT. For example:
hostname# show running-config
...
object network obj1
range 192.168.49.1 192.150.49.100
object network obj2
object 192.168.49.100
object network network-1
subnet <network-1>
object network network-2
subnet <network-2>
object-group network pool
network-object object obj1
network-object object obj2
...
object network network-1
nat (inside,outside) dynamic pool
object network network-2
nat (inside,outside) dynamic pool
show xlate
Shows current NAT session information. 
Command
Purpose