'global address overlaps with mask'

homeboarder8 · ‎08-03-2007

static (inside,outside) <global ip> <local ip> netmask <local ip netmask>

When I enter the above in my pix 501 (mind that whats in the <> is an ip address) I get an error message that says 'global address overlaps with mask'

Any ideas?

jwalker · ‎08-03-2007

This likely means that static overlaps with a previously existing global statement. Are you doing a one-to-one static? Or are you translating a larger subnet?

Jesterino · ‎08-09-2007

You're translating your whole inside network. Basically the 'netmask' relates to the global IP AND the local IP. For example, to translate 32 outside addresses to 32 inside addresses, use netmask 255.255.255.224.

If you're translating one outside address:

static (inside,outside) netmask 255.255.255.255

You can also leave off the whole netmask 255.255.255.255 text if it's one host, the PIX will fill that in automatically.

t805139 · ‎10-18-2012

WARNING: mapped-address conflict with existing static

TCP ISP2:0.0.0.0/80 to inside:0.0.0.0/80 netmask 0.0.0.0

ERROR: unable to reserve port 80 for static PAT

ERROR: unable to download policy

this does not seem to work

Julio Carvajal · ‎10-18-2012

Hello,

Please post the nat configuration you have and the command you are trying to enter,

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC