Static NAT

Unanswered Question
Jun 17th, 2007

When configuring static nat (inside, outside) shouldn't the subnet address usedin the static (inside, outside) command be in the same subnet as the inside or outside interface IP address. One of my customer is saying it doesn't have to be.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
satish_zanjurne Mon, 06/18/2007 - 00:55


1.You use static alongwith access-list for mapping the Hosts which you want to make available to public/partner.

2.It makes sense using the same subnet address as of Outside interface for mapped/global static address.

I have not seen anybody implementing out of this scope,neither i have read it.

astanislaus Mon, 06/18/2007 - 02:14

Problem is attached:

After puting the following command customer is seeing ARP Storm.

static (inside,outside) netmask 0 0

satish_zanjurne Mon, 06/18/2007 - 04:32

Hi Pal,

Find below the syntax of static command.

static (real_interface,mapped_interface) {mapped_address | interface} real_address [netmask mask]


real_interface = inside

mapped_interface = outside

mapped_address =

real_address =

netmask =

it becomes

static (inside,outside) netmask 0 0

Modify your access-list to allow access to as destination.

Hope this is Helpdul


This Discussion