topic PIX Nat Zero vs Global PAT in Network Security

PIX Nat Zero vs Global PAT

jason.aarons — Fri, 21 Feb 2020 07:48:57 GMT

Will PC 10.16.232.11 get the global pat going outbound (10.16.8.247) or the static (10.16.9.101)? I need it to get the static.

Should I add a "nat 0" for 10.16.232.11?

global (outside) 1 10.16.8.247

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

static (inside,outside) 10.16.9.101 10.16.232.122 netmask 255.255.255.255 0 0

PIX 6.3(1)

Re: PIX Nat Zero vs Global PAT

jason.aarons — Fri, 17 Dec 2004 22:40:42 GMT

Typo, the pc is actually 10.16.232.122, the nat 0 would be for 10.16.232.122

Re: PIX Nat Zero vs Global PAT

scoclayton — Sat, 18 Dec 2004 02:17:39 GMT

A static command has a higher priority than a nat (intf) 1 command. So, yes...the 10.16.232.122 host will be translated via the static. Make sure you issue a 'cl xlate' after adding the static to clear out any existing translations the PC may already have.

Scott