Cisco FirePOWER ASA 5500 series Configuration Manual page 325

Chapter 17 Applying NAT
Configure PAT for the inside network by entering the following commands:
Step 1
hostname(config)# nat (inside) 1 0.0.0.0 0.0.0.0 0 0
hostname(config)# global (outside) 1 209.165.201.15
Redirect Telnet requests for 209.165.201.5 to 10.1.1.6 by entering the following command:
Step 2
hostname(config)# static (inside,outside) tcp 209.165.201.5 telnet 10.1.1.6 telnet netmask
255.255.255.255
Step 3 Redirect FTP requests for IP address 209.165.201.5 to 10.1.1.3 by entering the following command:
hostname(config)# static (inside,outside) tcp 209.165.201.5 ftp 10.1.1.3 ftp netmask
255.255.255.255
Redirect HTTP requests for the security appliance outside interface address to 10.1.1.5 by entering the
Step 4
following command:
hostname(config)# static (inside,outside) tcp interface www 10.1.1.5 www netmask
255.255.255.255
Redirect HTTP requests on port 8080 for PAT address 209.165.201.15 to 10.1.1.7 port 80 by entering
Step 5
the following command:
hostname(config)# static (inside,outside) tcp 209.165.201.15 8080 10.1.1.7 www netmask
255.255.255.255
OL-10088-01
Cisco Security Appliance Command Line Configuration Guide
NAT Examples
17-35