thks,KS quickly repply.

if replace the hub with a swtich and carve vlans for each of the interface in the firewall,the multiple interface use same global ip can work normal.

can you give me some cco link for this cfg. thks millions.

guoqiang

Here is a good link that I found:

http://www.cisco.com/en/US/tech/tk389/tk689/technologies_configuration_example09186a008009478e.shtml

-KS

Hi,KS:

no the vlan cfg.I want to know if  can find the sample or explain for the multiple interface use same global ip cfg .I can't find the the multiple interface use same global ip sample in cco.

thks millions

guoqiang

Sorry I didn't understand the question correctly.

Say you have dmz1, dmz2, dmz3, inside and outside interfaces.

dmz1 - 10.10.10.0/24

dmz2 - 192.168.1.0/24

dmz3 - 172.16.1.0./24

inside - 192.168.2.0/24

outside - interface address

nat (inside) 1 192.168.2.0 255.255.255.0

nat (dmz1) 1 10.10.10.0 255.255.255.0

nat (dmz2) 1 192.168.1.0 255.255.255.0

nat (dmz3) 1 192.168.2.0 255.255.255.0

global (outside) 1 interface.

There you go. That is a sample.  All the inside networks will be PAT-ed to the outside interface address.

You can use this link for reference:

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/no.html#wp1737858

-KS