[ 50 ] Section 3: ASA Access Control Here is an example that configures dynamic NAT that hides 192.168.2.0 network behind a range of outside addresses 10.2.2.1 through 10.2.2.10: ciscoasa(config)# object network ciscoasa(config-network-object)# ciscoasa(config)# object network ciscoasa(config-network-object)# ciscoasa(config-network-object)# my-range-obj range 10.2.2.1 10.2.2.10 my-inside-net subnet 192.168.2.0 255.255.255.0 nat (inside,outside) dynamic my-range-obj This example configures dynamic PAT that hides the 192.168.2.0 network behind address 10.2.2.2: ciscoasa(config)# object network my-inside-net ciscoasa(config-network-object)# subnet 192.168.2.0 255.255.255.0 ciscoasa(config-network-object)# nat (inside,outside) dynamic 10.2.2.2