The hardest thing about NAT in Cisco routers and ASA firewalls is understanding how to use the technology in real life. Tons of guide papers have been written, the Internet is full of gigabytes of information on the topic, yet the subject remains relevant. Truth is, 95% of absolute majority of people will only need to use just one of the two types of connections.
1) PAT (Port Address Translation)
A bunch of internal IP addresses are translated into a single external IP address when connecting to the outside world. While each packet destined to outside networks is being processed by a router or a Cisco ASA, the correlation of the actual internal IP address and port number of the source of the TCP connection is being remembered, which allows to correctly perform the reverse translation and transfer return packets.
This kind of NAT is used when you need to allow access FROM an internal network to external resources (such as the Internet).
2) Static NAT
This is translating addresses one-to-one. A specific public IP address is put together with an internal IP address. This kind of NAT translation is used when you need access FROM the outside world to a server or resource within the internal network or a DMZ.
Summary:
If you need access from the internal LAN to the outside world, it is most likely that you will have to configure PAT.
If you need access from the outside world to a certain internal resource, then you will have to configure static NAT.
NAT configuration examples for the above cases
Cisco ASA (IOS below 8.3)
PAT
Static NAT
Cisco ASA (IOS above 8.3)
PAT
Static NAT
Cisco IOS Router
PAT
Static NAT
Also there is a full explanation of port forwarding (static NAT) on Cisco ASA with configuration examples in this article.


Thanks Alex, I enjoyed your lesson very much… Great site.
looking forward to see a WLC basic configuration.