Cisco ASA 5505 Configuration Manual page 521

Chapter 26 Information About NAT
Figure 26-19
static translation for the outside server. In this case, when an inside user requests the address for
ftp.cisco.com from the DNS server, the DNS server responds with the real address, 209.165.20.10.
Because you want inside users to use the mapped address for ftp.cisco.com (10.1.2.56) you need to
configure DNS reply modification for the static translation.
Figure 26-19
3
DNS Reply Modification
209.165.201.10
Where to Go Next
To configure network object NAT, see
To configure twice NAT, see
OL-20339-01
shows a web server and DNS server on the outside. The adaptive security appliance has a
DNS Reply Modification Using Outside NAT
1
DNS Query
ftp.cisco.com?
2
DNS Reply
209.165.201.10
Appliance
10.1.2.56
4
DNS Reply
10.1.2.56
Chapter 28, "Configuring Twice NAT."
ftp.cisco.com
209.165.201.10
Static Translation on Inside to:
10.1.2.56
DNS Server
Outside
10.1.2.56
Security
FTP Request
Inside
User
10.1.2.27
Chapter 27, "Configuring Network Object NAT."
Cisco ASA 5500 Series Configuration Guide using ASDM
Where to Go Next
7
FTP Request
209.165.201.10
6
Dest Addr. Translation
209.165.201.10
5
10.1.2.56
26-23