An overview of network address translation wizard for ASA devices, including translated addresses, rule behavior, interface scope, and policy impact.
The Network Address Translation (NAT) wizard helps you create NAT rules on your devices for these types of access:
-
Enable Internet Access for Internal Users. You may use this NAT rule to allow users on an internal network to reach the internet.
-
Expose an Internal Server to the Internet. You may use this NAT rule to allow people outside your network to reach an internal web or email server.
Prerequisites to "Enable Internet Access for Internal Users"
Before you create your NAT rule, gather this information:
-
The interface that is closest to your users; this is usually called the "inside" interface.
-
The interface closest to your Internet connection; this is usually called the "outside" interface.
-
If you want to allow only specific users to reach the internet, you need the subnet addresses for those users.
Prerequisites to "Expose an Internal Server to the Internet"
Before you create your NAT rule, gather this information:
-
The interface that is closest to your users; this is usually called the "inside" interface.
-
The interface closest to your Internet connection; this is usually called the "outside" interface.
-
The IP address of the server inside your network that you would like to translate to an internet-facing IP address.
-
The public IP address you want the server to use.
.
> 
.