Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Multiple PAT in PIX 525

Dear Sirs,

we`re using Cisco Secure PIX Firewall Version 5.2(8), and we neeed to configure multiple PAT.

we try to put it with the command

global (outside) 1 x.y.z.a netmask

for the first statement and

global (outside) 1 a.c.d.e netmask

for the second IP PAT.

But we don`t see any translation over the second one, just around the first one.

Is there a special configuration to performing the operation on PIX or is an automatic process?

Is a round robin process between PAT IP address?

Thanks in advance

Our PIX is a 525.



New Member

Re: Multiple PAT in PIX 525

I think the problem is that because the PAT can cope with many IP addresses you haven't reached the limit yet.

What you could try is having a Global (outside) 1 and a Global (outside) 2 with different addresses, then have a NAT 1 and a NAT 2 on the inside capturing different source addresses. This would then put the NAT 1 to Global 1 and 2 to 2 etc.

New Member

Re: Multiple PAT in PIX 525

First I would upgrade to image 6.xx

do you have nat (inside) 1 0 0 in your conf?

this should work, make sure you have the statics configured and the route to that network a.c.d.e or the second global.

CreatePlease login to create content