Home | Net Issues | Net How To | Wireless | Case Studies | Articles |  Forums| Services | About Us | Careers | Quick Setup | Contact Us|

How to configure 1-to-1 NAT on Cisco ASA for a web server - Step by step with screenshots 

The following example performs1-to-1 NAT on Cisco ASA for a web server in DMZ.

In Cisco ASA

1. Create a network object for the web server:
hostname(config)# object network ADFS_Proxy


2. Define the web server address:
hostname(config-network-object)# host 172.16.80.9


3. Configure static NAT for the object:
hostname(config-network-object)# nat (inside,outside) static x.x.x.174

In the Web Server
These are the TCP/IP configuration:
IPv4 Address. . . . . . . . . . . : 172.16.80.9(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 172.16.80.1
DNS Servers . . . . . . . . . . . : 10.0.0.130
4.2.2.2
NetBIOS over Tcpip. . . . . . . . : Enabled

Note: 1. Web server uses DMZ default gateway and the Cisco ASA will take care of the translation.

2. In most cases, incoming to the web server through NAT while the web server ingoing uses PAT or outside public IP address, x.x.x.193 in our example.

Post your questions, comments, feedbacks and suggestions

Contact a consultant

Related Topics