Implementing NAT

To implement NAT in your network:

  • Enable NAT on both the inside (local) and outside (public) interfaces to be used for translation
  • If you intend to use inside source address dynamic translation (see Dynamic Address Translations for details):
    • Define an access-list of inside addresses
    • Define a NAT address pool of outside addresses
    • Enable dynamic translation of inside addresses specifying an access-list of inside addresses and a NAT address pool of outside addresses
      • - Optionally specify a NAT cone method along with an access list specifying the protocols and ports to cone
    • Optionally configure IPv4 overload for NAPT (defaults to NAT)
    • Optionally specify the interface to which translations are applied
  • If you intend to use inside source address static translation (see Static Address Translation for details), enable inside source address static translation in the appropriate NAT or NAPT context
    • Optionally specify a NAT cone method along with an access list specifying the protocols and ports to cone
  • Optionally change the NAT FTP control port from its default of 21
  • Optionally modify maximum allowed entries and NAT translation timeout values