topic Re: A NAT question in Network Security https://community.cisco.com/t5/network-security/a-nat-question/m-p/656775#M1023068 <HTML><HEAD></HEAD><BODY><P>Hi </P><P></P><P>I don't see any reason why this wouldn't work as you are Natting source IP addresses only so there should not be an overlap. </P><P></P><P>So to nat outside addresses you could do </P><P></P><P>nat (outside) 1 0.0.0.0 0.0.0.0 outside </P><P>global (inside) 1 "ip address" netmask 255.255.255.255 </P><P></P><P>I have used NAT like this before but not for all addresses, ie i had specific subnets coming in via VPN tunnels so i have never used the 0.0.0.0 0.0.0.0 addressing for outside NAT. </P><P></P><P>Let me know if it works </P><P></P><P>Jon </P></BODY></HTML> Wed, 14 Mar 2007 12:29:45 GMT Jon Marshall 2007-03-14T12:29:45Z A NAT question https://community.cisco.com/t5/network-security/a-nat-question/m-p/656774#M1023067 <P>Not something I've attempted before so perhaps somebody can shed some light.</P><P></P><P>Have a PIX configured with static inside translations, so servers appear with a fixed IP address on external subnet.</P><P></P><P>In addition to this I want to add a static outside translation so that all outside addresses appear to come from the same address to the host inside.</P><P></P><P>Presumably the 2 can co-exist, the result being 2 separate translations?</P> Mon, 11 Mar 2019 09:45:57 GMT https://community.cisco.com/t5/network-security/a-nat-question/m-p/656774#M1023067 g.leonard 2019-03-11T09:45:57Z Re: A NAT question https://community.cisco.com/t5/network-security/a-nat-question/m-p/656775#M1023068 <HTML><HEAD></HEAD><BODY><P>Hi </P><P></P><P>I don't see any reason why this wouldn't work as you are Natting source IP addresses only so there should not be an overlap. </P><P></P><P>So to nat outside addresses you could do </P><P></P><P>nat (outside) 1 0.0.0.0 0.0.0.0 outside </P><P>global (inside) 1 "ip address" netmask 255.255.255.255 </P><P></P><P>I have used NAT like this before but not for all addresses, ie i had specific subnets coming in via VPN tunnels so i have never used the 0.0.0.0 0.0.0.0 addressing for outside NAT. </P><P></P><P>Let me know if it works </P><P></P><P>Jon </P></BODY></HTML> Wed, 14 Mar 2007 12:29:45 GMT https://community.cisco.com/t5/network-security/a-nat-question/m-p/656775#M1023068 Jon Marshall 2007-03-14T12:29:45Z