Connection limits when static natting a subnet

george_daly · ‎08-22-2008

Hi,

The device I'm implimenting static NAT on in this instance is an FWSM running 3.1

I want to know, if I static NAT a subnet as opposed to a host, and I want to impliment connection limiting and embryonic connection limiting, will the connection numbers apply to the whole NATted subnet or just individual host IPs within that subnet (I'm hoping for the latter!).

So, for example: static (inside,outside) 192.168.0.0 192.168.0.0 netmask 255.255.255.0 1000 20

Does that mean 1000 total connections 20 embryonic for the /24 for or each host within the /24.

Hope that's clear, and thanks for any replies!

Cheers,

George

Marwan ALshawi · ‎08-22-2008

interesting question

not sure but for mean it means per line statemnt this limit will apply i mean for the whole subnet in this case

try it make the limit to 3 or 4 amke make more 5 or 6 connections

good luck