topic Re: PAT using a network number? in Network Security

PAT using a network number?

huangedmc — Mon, 11 Mar 2019 09:32:28 GMT

What does it mean when you have a network number as the PAT address?

Will it work?

Re: PAT using a network number?

rleivaoc — Tue, 13 Feb 2007 06:55:26 GMT

What are you trying to do on the firewall? Can you give more details?

Re: PAT using a network number?

huangedmc — Wed, 14 Feb 2007 02:14:10 GMT

I'm not trying to change anything, but just want to understand why our NAT/PAT is set up this way by my predecessors:

global (outside) 1 128.230.236.1 - 128.230.236.254

global (outside) 1 128.230.236.0

I understand the first line is for NAT, and the second is for PAT. What I don't understand is why you can use a network address as the PAT IP.

Can anyone please explain? thanks.

Re: PAT using a network number?

gagansethi — Wed, 14 Feb 2007 06:43:32 GMT

Hi,

Using network address is not possible with Global. You can only use a single ip address for PAT or a range or IP addresses for NAT purpose.

Please refer to the link below for more information on applying NAT:

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_7_2/conf_gd/firewall/cfgnat.htm#wp1067863

Thanks

gagan

Re: PAT using a network number?

huangedmc — Wed, 14 Feb 2007 23:59:34 GMT

"Using network address is not possible with Global."

I know.

The entry is there already, and I'm asking how in hell could someone have done it on the Pix w/o getting rejected.

Re: PAT using a network number?

huangedmc — Sat, 17 Feb 2007 15:14:01 GMT

Turns out that PAT IP isn't a network address after all...after double checking the netmask, it's a valid IP address in the middle of a really large subnet.

Nevermind.