Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

overlapping nat?

Good day,

I have two companies behind our pix, I know this isn't the pix forum, but I figured this would be the place to ask a generic NAT question.

I have

nat (inside) 0 access-list 101

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

nat (inside) 2 10.0.100.0 255.255.255.0

global (dmz) 2 interface

global (outside) 1 12.x.x.x-12.x.x.xnetmask 255.255.255.240

global (outside) 1 12.x.x.xnetmask 255.255.255.240

10.0.100.0 is our network going to the dmz. I only want us to be able to get there. This doesn't work and someone has suggest that Cisco NAT will not allow overlapping networks. I know you have to double-nat for outside networks that have the same rfc 1918's, but do I need to reduce the scope of the nat (inside) 1 statement to something more specific?

thanks,

bk

1 REPLY
Anonymous
N/A

Re: overlapping nat?

I guess, if you re-order the nat statements like below, it should work. Let me know how it goes...

nat (inside) 1 10.0.100.0 255.255.255.0

nat (inside) 2 0.0.0.0 0.0.0.0 0 0

global (dmz) 1 interface

global (outside) 2 12.x.x.x-12.x.x.xnetmask 255.255.255.240

global (outside) 2 12.x.x.xnetmask 255.255.255.240

94
Views
0
Helpful
1
Replies
CreatePlease login to create content