Cisco Systems and the ASA Services Module Manual De Usuario

Descargar
Página de 712
 
4-5
Cisco ASA Series Firewall CLI Configuration Guide
 
Chapter 4      Configuring Network Object NAT
  Configuring Network Object NAT
Detailed Steps
Configuring Dynamic NAT
This section describes how to configure network object NAT for dynamic NAT. For more information, 
see the 
Detailed Steps
Command
Purpose
object network 
obj_name
{host ip_address | range ip_address_1 
ip_address_2 | subnet subnet_address 
netmask}
Example:
ciscoasa(config)# object network TEST
ciscoasa(config-network-object)# range 
10.1.1.1 10.1.1.70
Adds a network object, either IPv4 or IPv6.
object-group network
 grp_name
{network-object {object net_obj_name 
subnet_address netmask 
host
ip_address} | 
group-object
grp_obj_name}
Example:
ciscoasa(config)# object network TEST
ciscoasa(config-network-object)# range 
10.1.1.1 10.1.1.70
ciscoasa(config)# object network TEST2
ciscoasa(config-network-object)# range 
10.1.2.1 10.1.2.70
ciscoasa(config-network-object)# 
object-group network MAPPED_IPS
ciscoasa(config-network)# network-object 
object TEST
ciscoasa(config-network)# network-object 
object TEST2
ciscoasa(config-network)# network-object 
host 10.1.2.79
Adds a network object group, either IPv4 or IPv6.
Command
Purpose
Step 1
Create a network object or group for the 
mapped addresses.
See the 
.
Step 2
object network 
obj_name 
Example:
ciscoasa(config)# object network 
my-host-obj1
Configures a network object for which you want to configure NAT, 
or enters object network configuration mode for an existing network 
object.