（PT）DNAT

noteId: WEBf2b6cc1f845a7156b5f713de9fc7e006 · 原始路径：/ALL/网络 - C模块/ASAv 防火墙/（PT）DNAT.note

将内网172.16.1.10地址映射到外网103.0.1.11object network DNS-SRV host 172.16.1.10 nat (Inside,Outside) static 103.0.1.11# 将内网172.16.1.20地址映射到外网103.0.1.20object network WEB-SRV host 172.16.1.20 nat (Inside,Outside) static 103.0.1.20 ## 配置防火墙放行端口：access-list DNS_WEB permit udp any host 103.0.1.11 eq 53access-list DNS_WEB permit tcp any host 103.0.1.20 eq 80access-group DNS_WEB in interface Outside