Cisco Support Community
Community Member

Using Static Nat and Pat simultaneously

I have a scenario that I have to use both static nat and pat simultaneously on one interface. If this is possible please provide me the solution.


Shahzad Iqbal

Community Member

Re: Using Static Nat and Pat simultaneously

If your goal is simply to provide internal users with access to the Internet then this is possible. As long as the link layer protocol supports the exchange of keep-alive messages from router to router, link failure will be detected by the link layer protocol. Floating static routes can then reliably direct all outbound traffic to a working ISP link. Port Address Translation (PAT) is then used to send outbound packets with a source IP address associated by the ISP with that outbound link. Return traffic will automatically come back via the same working link, because that link is the only link servicing that address range.

If this interface connected to ISP1 doesn't go your router will not detect the link failure. In that case you can use the policy based routing with track feature so identify the link being down and second isp will take over.

Of course, this approach won't work if you're providing services to the outside world, as the addresses associated with the failed link will disappear from the Internet. Similarly, connections established over the link that failed will need to be reconnected. However, for many applications this impact is minor.


Re: Using Static Nat and Pat simultaneously

Referring your external interface connectin ur ISP connects as the overload one in the NAT command will use this as PAT, as it will be a /30 IP.

For NAT on the same,ask your provider to give u say 2/3 extra global IP's.This you can assign to static NAT. YOu would be able to use both as the ISP will be pointing these extra ip's towards the /30 interface.

Rate if this helps!!!

CreatePlease to create content