Cisco 7604 Configuration Manual page 230

Chapter 13 Identifying Traffic with Access Lists
Access List Overview
If you want to allow an outside host to access an inside host, you can apply an inbound access list on the
outside interface. You need to specify the translated address of the inside host in the access list because
that address is the address that can be used on the outside network (see Figure 13-2).
Figure 13-2 IP Addresses in Access Lists: NAT used for Destination Addresses
209.165.200.225
ACL
Permit from 209.165.200.225 to 209.165.201.5
Outside
Inside
10.1.1.34 209.165.201.5
Static NAT
See the following commands for this example:
hostname(config)# access-list OUTSIDE extended permit ip host 209.165.200.225 host
209.165.201.5
hostname(config)# access-group OUTSIDE in interface outside
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
13-4
OL-20748-01