Address - Cisco ASA 5505 Getting Started Manual

Configuring the Security Appliance for a DMZ Deployment
To map the real web server IP address (10.30.30.30) statically to a public IP
address (209.165.200.225), perform the following steps:
In the Configuration > Firewall > NAT Rules pane, choose Add Static NAT Rule
Step 1
from the Add drop-down list.
The Add Static NAT Rule dialog box appears.
In the Original area, specify the real IP address of the web server:
Step 2
a.
b.
Step 3 In the Translated area, specify the public IP address to be used for the web server:
a.
b.
ASA 5505 Getting Started Guide
6-22
From the Interface drop-down list, choose the DMZ interface.
Enter the real IP address of the DMZ web server. In this scenario, the IP
address is 10.30.30.30.
From the Interface drop-down list, choose Outside.
Click the Interface IP radio button. This is the IP address for the specified
interface, in this case, the outside interface.
Chapter 6 Scenario: DMZ Configuration
78-18003-02