Paul,

Here is the link:

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094837.shtml

Scroll down to the section entitled "Example: Allowing Internal Users to Access the Internet" and see the diagram below it. Perhaps I am just misreading what I am seeing?

Thanks,

Robb

If you go the link I posted above and view the example, now that I reconsider it, the following statement threw me off:

"The available valid addresses which we can use are in the range of 172.16.10.1 through 172.16.10.63"

With a /24 network, I don't think 172.16.10.64 can be a subnet ID --- as Paul said above, a .64 ID would require a /26 mask.

I looked at the link - they are just defining a pool of available addresses for NAT (not overloading) to be .1 - .63. So, in effect, this example is correct. They could, however use the whole /24 network for NAT if they wanted to, minus the .64 (S0) address.

By the way, just defining a network of 172.16.10.64 does not necessarily mean that it has to be a /26 - this could be variably subnetted to whatever you need. /26 just means that you are using .65-.126 as available addresses, with .127 being your broadcast address. You could alternatively, for example, use 172.16.10.64 /27 or /28, /29, /30

for networks of 172.16.10.65 - 94, 172.16.10.65 - .78, etc.

HTH,

Paul

That is correct...thanks for your help.