Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

'global address overlaps with mask'

static (inside,outside) <global ip> <local ip> netmask <local ip netmask>

When I enter the above in my pix 501 (mind that whats in the <> is an ip address) I get an error message that says 'global address overlaps with mask'

Any ideas?


Re: 'global address overlaps with mask'

This likely means that static overlaps with a previously existing global statement. Are you doing a one-to-one static? Or are you translating a larger subnet?

New Member

Re: 'global address overlaps with mask'

You're translating your whole inside network. Basically the 'netmask' relates to the global IP AND the local IP. For example, to translate 32 outside addresses to 32 inside addresses, use netmask

If you're translating one outside address:

static (inside,outside) netmask

You can also leave off the whole netmask text if it's one host, the PIX will fill that in automatically.

New Member

'global address overlaps with mask'

WARNING: mapped-address conflict with existing static

  TCP ISP2: to inside: netmask

ERROR: unable to reserve port 80 for static PAT

ERROR: unable to download policy

this does not seem to work

'global address overlaps with mask'


Please post the nat configuration you have and the command you are trying to enter,

Looking for some Networking Assistance? Contact me directly at I will fix your problem ASAP. Cheers, Julio Carvajal Segura