Cisco asa nat-pat

[lucandat]

inside: 10.0.0.0/8
dmz: 172.16.0.0/16
outside: 200.0.0.0/24

NAT
nat (inside) 1 0 0
nat (dmz) 1 172.16.0.0 255.255.0.0
global (dmz) 1 172.16.0.1-172.16.255.254
global (outside) 1 200.0.0.1-200.0.0.254
static (inside,outside) 200.0.0.1 10.0.0.1 netmask 255.255.255.255
static (dmz,outside) 200.0.0.2 172.16.0.1 netmask 255.255.255.255
PAT
access-list INSIDE permit ip 10.0.0.0 255.0.0.0 any
nat (inside) 2 access-list INSIDE
access-list DMZ permit ip 172.16.0.0 255.255.0.0 any
nat (dmz) 2 access-list DMZ
global (dmz) 2 interface
global (outside) 2 interface
static (dmz,outside) tcp interface 80 172.16.0.1 80 255.255.255.255
static (dmz,outside) tcp interface 80 172.16.0.1 80 netmask 255.255.255.255