Cisco Systems ASA 5585-X Manual De Usuario

Twice NAT also lets you use service objects for static NAT-with-port-translation; network object NAT 
only accepts inline definition.

For detailed information about the differences between twice NAT and network object NAT, see the 

.

Twice NAT rules are added to section 1 of the NAT rules table, or if specified, section 3. For more 
information about NAT ordering, see the 

.

For both the real and mapped addresses, configure network objects or network object groups (the 
object network or object-group network command). Network object groups are particularly useful 
for creating a mapped address pool with discontinuous IP address ranges or multiple hosts or 
subnets. To create a network object or group, see the general operations configuration guide.

For static NAT-with-port-translation, configure TCP or UDP service objects (the object service 
command). To create a service object, see the general operations configuration guide. 

For specific guidelines for objects and groups, see the configuration section for the NAT type you want 
to configure. See also the 

 section.

This section includes the guidelines and limitations for this feature.

Supported in single and multiple context mode.

Supported in routed and transparent firewall mode.

In transparent mode, you must specify the real and mapped interfaces; you cannot use any.

In transparent mode, you cannot configure interface PAT, because the transparent mode interfaces 
do not have IP addresses. You also cannot use the management IP address as a mapped address.

In transparent mode, translating between IPv4 and IPv6 networks is not supported. Translating 
between two IPv6 networks, or between two IPv4 networks is supported.

Supports IPv6.

All models

Base License.