Multiple PAT in PIX 525

[carlos.zelayandia]

Dear Sirs,

we`re using Cisco Secure PIX Firewall Version 5.2(8), and we neeed to configure multiple PAT.

we try to put it with the command

global (outside) 1 x.y.z.a netmask 255.255.255.0

for the first statement and

global (outside) 1 a.c.d.e netmask 255.255.255.0

for the second IP PAT.

But we don`t see any translation over the second one, just around the first one.

Is there a special configuration to performing the operation on PIX or is an automatic process?

Is a round robin process between PAT IP address?

Thanks in advance

Our PIX is a 525.

Thanks

Carlos.

[johnbroadway]

I think the problem is that because the PAT can cope with many IP addresses you haven't reached the limit yet.

What you could try is having a Global (outside) 1 and a Global (outside) 2 with different addresses, then have a NAT 1 and a NAT 2 on the inside capturing different source addresses. This would then put the NAT 1 to Global 1 and 2 to 2 etc.

[rgrcommo]

First I would upgrade to image 6.xx

do you have nat (inside) 1 0.0.0.0 0.0.0.0 0 0 in your conf?

this should work, make sure you have the statics configured and the route to that network a.c.d.e or the second global.