Hi, thanks for reply. What I want to confirm are:

1. For command "static (inside,outside) 202.100.1.16 192.168.2.32 netmask 255.255.255.240"

Is this a just one-on-one natting or block-on-block natting ? if it's block on block, which ip will be natted to which ip ?

2.For each IP from given public IP pool will be natted to the IP in exactly same position from private pool.

For example, 202.100.1.17 will be natted to 192.168.2.33 and 202.100.1.19 will be natted to 192.168.2.35 not any other addresses in the private pool.

I checked Cisco document, all examples are one-on-one natting, there is no block-to-block .I hope I explained clearly my requirement, thanks again.

""1. For command "static (inside,outside) 202.100.1.16 192.168.2.32 netmask 255.255.255.240"

Is this a just one-on-one natting or block-on-block natting ? if it's block on block, which ip will be natted to which ip ?""

It's for the block of 16 addresses as indicated by your netmask in the static. The response to the second part of the question is the next question.

""2.For each IP from given public IP pool will be natted to the IP in exactly same position from private pool.

For example, 202.100.1.17 will be natted to 192.168.2.33 and 202.100.1.19 will be natted to 192.168.2.35 not any other addresses in the private pool.""

This part I wasn't sure. So, I just tested this in my lab PIX and the translation is not happening in any order and it's all over the place. Hence, you shouldn't count on the same set of inside and outside address to be used every time PIX does the translation.

HTH

Sundar

Thanks Sundar.

Glad it helped and thanks for the rating :)