Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

multiple nat/pat statements - algorithm...

I was trying to find the logic (algorith) of how NAT / PAT staements are assigned by PIX.....

For example:

nat (inside) 10 10.0.0.0 255.0.0.0

global (outside) 10 1.1.1.1- 1.1.1.10 netmask 255.255.255.255

global (outside) 10 1.1.1.11 netmask 255.255.255.255

global (outside) 10 1.1.1.12 netmask 255.255.255.255

global (outside) 10 1.1.1.13 netmask 255.255.255.255

According to the ardicle below, it should exsaust first all nat address and then pat.

http://www.cisco.com/en/US/docs/security/asa/asa72/command/reference/gh_72.html#wp1688051

but what about when multiple PATs are defined?

1 REPLY
Cisco Employee

Re: multiple nat/pat statements - algorithm...

Only when the PAT ports of the first PAT ip are filled is the ASA going to use the second PAT address.

I hope it helps.

PK

736
Views
0
Helpful
1
Replies
CreatePlease to create content