Using Static NAT for network and host

[ROD FRANKLIN]

Is it possible to use a static NAT for a network and then a different one for a host within that network.

Example:

static (inside,outside) 10.10.10.0 10.10.10.0 netmask 255.255.255.0

<---so that all 10.10.10.0 address are seen on outside as themselves---->

static (inside,outside) 10.10.10.5 11.11.11.5 netmask 255.255.255.255

<---so that 10.10.10.5 host is NAT'ed to different address--->

[varrao · Accepted solution]

Hi Rod,

Yes it is very much possible, the more specific one will take the precedence over the other static nat for the network,  , to verify it you can also run a packet tracer for it.

Packet-tracer input outside tcp 4.2.2.2 23456 11.11.11.5 80 detailed

and your static nat is not correct, it shoudl be:

static (inside,outside)  11.11.11.5 10.10.10.5 netmask 255.255.255.255

Thanks,

Varun

[ROD FRANKLIN]

Thanks for the help!