'global address overlaps with mask'

Unanswered Question
Aug 3rd, 2007

static (inside,outside) <global ip> <local ip> netmask <local ip netmask>

When I enter the above in my pix 501 (mind that whats in the <> is an ip address) I get an error message that says 'global address overlaps with mask'

Any ideas?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Loading.
Jesterino Thu, 08/09/2007 - 02:04

You're translating your whole inside network. Basically the 'netmask' relates to the global IP AND the local IP. For example, to translate 32 outside addresses to 32 inside addresses, use netmask 255.255.255.224.

If you're translating one outside address:

static (inside,outside) netmask 255.255.255.255

You can also leave off the whole netmask 255.255.255.255 text if it's one host, the PIX will fill that in automatically.

t805139 Thu, 10/18/2012 - 11:21

WARNING: mapped-address conflict with existing static

  TCP ISP2:0.0.0.0/80 to inside:0.0.0.0/80 netmask 0.0.0.0

ERROR: unable to reserve port 80 for static PAT

ERROR: unable to download policy

this does not seem to work

Julio Carvajal Thu, 10/18/2012 - 11:27

Hello,

Please post the nat configuration you have and the command you are trying to enter,

Actions

This Discussion