GLOBAL ADDRESS OVERLAP WITH MASK

[gcocchi]

From the manual:

# access-list NET1 permit ip 10.1.2.0 255.255.255.224 209.165.201.0 255.255.255.224

# static (inside,outside) 209.165.202.129 access-list NET1

i receive:

"global address overlaps with mask"

Using different ip or mask do not change the error. Why this?

Thx.

[oabduo983]

Hello,

I guess you are willing to maps (PAT) the source subnet (10.1.2.0/225.255.255.224) to go out as 209.165.202.129. The commands you provided in this case you will have to have only 1 single source IP becuase the static command maps 1 to 1 (or a subnet to a subnet).

The concept you are looking after has a bit different commands, it is as follows:

access-list NET1 permit ip 10.1.2.0 255.255.255.224 209.165.201.0 255.255.255.224

nat (inside) 5 access-list NET1

global (outside) 5 209.165.202.129

clear xlate

Have a good time ;)