Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Multiple NAT pools

Hi,

I am trying to figure out how NAT works with multiple NAT pools overload.

I have a major network 1.0.0.0/8 my current NAT is for the subnet 10.16.20.0/24 with overload however I want to add another NAT Pool that will cover the entire network 10.0.0.0/8 my question is if a packet comes from 10.16.20.0 network which NAT pool will do the NATing the more specifc one (the one currently doing the NAT for this subnet) or the broad one the one I want to create for the major network?

Any thoughts?

  • Other Security Subjects
2 REPLIES
Cisco Employee

Re: Multiple NAT pools

The NAT pool that is used is always the most specific one, so you can have things like this:

global (outside) 2 1.1.1.2

global (outside) 1 1.1.1.1

nat (inside) 2 10.0.0.0 255.0.0.0

nat (inside) 1 10.16.20.0 255.255.255.0

Anything from 10.16.20.0 will be PAT'd to 1.1.1.1 and anything from any other 10.0.0.0 subnet will be PAT'd to 1.1.1.2. Hope that helps.

New Member

Re: Multiple NAT pools

Is this going to work the same way in routers also (means the more specific scenario).

136
Views
0
Helpful
2
Replies
This widget could not be displayed.