Cisco ASA Series Cli Configuration Manual page 777

Chapter 1 Information About NAT
Figure 1-24
the outside server. In this case, when an inside user requests the address for ftp.cisco.com from the DNS
server, the DNS server responds with the real address, 209.165.20.10. Because you want inside users to
use the mapped address for ftp.cisco.com (10.1.2.56) you need to configure DNS reply modification for
the static translation.
Figure 1-24
3
DNS Reply Modification
209.165.201.10
Figure 1-24
translation for the outside server. In this case, when an inside IPv6 user requests the address for
ftp.cisco.com from the DNS server, the DNS server responds with the real address, 209.165.200.225.
shows an FTP server and DNS server on the outside. The ASA has a static translation for
DNS Reply Modification, DNS Server on Host Network
1
DNS Query
ftp.cisco.com?
2
DNS Reply
209.165.201.10
Appliance
10.1.2.56
4
DNS Reply
10.1.2.56
shows an FTP server and DNS server on the outside IPv4 network. The ASA has a static
ftp.cisco.com
209.165.201.10
Static Translation on Inside to:
10.1.2.56
DNS Server
Outside
10.1.2.56
Security
FTP Request
Inside
User
10.1.2.27
Cisco ASA Series CLI Configuration Guide
DNS and NAT
7
FTP Request
209.165.201.10
6
Dest Addr. Translation
209.165.201.10
5
10.1.2.56
1-31