Add a dNAT rule like below to your LAN interface.
set service nat rule 1 description DemoMapping set service nat rule 1 destination address 1.1.1.1 set service nat rule 1 inbound-interface <LAN-Interface> set service nat rule 1 inside-address address 2.2.2.2 set service nat rule 1 type destination set service nat rule 1 source group address-group YOURSERVERS