Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

NAT with single outside address

I'm an instructor creating labs for a PIX class. I'd like to illustrate NAT with only a single public address. I'd like to prevent PAT from kicking in, so only the first inside machine to connect out gets the use of the public IP; any others would be denied. Does the PIX do this, or does it automatically use PAT when it gets to the last IP address. And, if I can prevent PAT, how would I do it?

thanks-

dave

  • VPN
3 REPLIES
Gold

Re: NAT with single outside address

it depends whether the public ip is being shared with pix outside interface ip.

e.g.

ip address outside 255.255.255.248

global (outside) 1 interface

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

with the commands above, the public ip is shared between the pix outside int and the nat.

so, with your case, you probably want to do this:

ip address outside 255.255.255.248

global (outside) 1

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

with the commands above, you would need two public ip.

New Member

Re: NAT with single outside address

Thanks so much! I'll have'ta chew on that for awhile.....

dave

Gold

Re: NAT with single outside address

just wondering how you go.

108
Views
0
Helpful
3
Replies
This widget could not be displayed.