PAT question

kope — Mon, 11 Mar 2019 21:43:17 GMT

i have a 192.168.1.0/24 address behind the firewall of an ASA. they only want to translate the half of the /24 address as a routable ip, the rest of the addresses (/25) will not be translated.

Would this work as below?

global (outside) 1 interface

nat (inside) 1 192.168.1.0 255.255.255.128

nat (inside) 0 0.0.0.0 0.0.0.0

PAT question

Julio Carvajal — Thu, 27 Oct 2011 16:30:34 GMT

Hello Kope,

If you just need to do Pat for 128 addresses the Nat configuration should be like this:

global (outside) 1 interface

nat (inside) 1 192.168.1.0 255.255.255.128

The Nat 0 is going to be taken in consideration first and it is going to mach all the inside users so no one is going to have internet access, that is why you just need the nat for the half of the /24 range and the global.

Hope you have a great day,

Julio

topic PAT question in Network Security

PAT question

PAT question