global (pat) based on host bit

[ericgarnel]

I want to be able to set up multple pats on an asa5550 and want to map groups of hosts to pats based on the host bit.

example:

pat 1, host bits end in 111

pat2, host bits end in 110

pat3, host bits end in 100.

Is there are way to do this on an asa5550 running 8.2.2 ?

Thanks,

Eric

[Federico Coto Fajardo]

Hi,

You can have multiple PAT rules, but to do the rules based on bit position you need wildcard masks.
The ASA supports only subnet masks.

You cannot map the host bits on subnet masks, so you have two options:

1. Make each PAT rule individually
2. Group the amount of hosts that you can with the corresponding subnet masks

Federico.