topic Re: Explanation on NAT Statement in Network Security

Explanation on NAT Statement

kuldeep.kaur — Mon, 11 Mar 2019 20:01:43 GMT

Hi Guys,

What does the following statement means on the pix firewall ? For example

global (outside) 2 67.75.236.193-67.75.236.194 netmask 255.255.255.240

Does the above mean that we have got two address 67.75.236.193 and 67.75.236.194 for the firewall to use for natting. (I know about what 2 means in the statement).

Tks

Re: Explanation on NAT Statement

PAUL GILBERT ARIAS — Sun, 06 Mar 2011 22:07:22 GMT

That means that the source network that falls under your nat will be able to get translated to those two addresses only. If you have 10 inside hosts trying to go out to the internet only two will be able to do it at the same time since they are all sharing the two global addresses.

Is that clear?

Sent from Cisco Technical Support iPhone App

Re: Explanation on NAT Statement

Jennifer Halim — Sun, 06 Mar 2011 22:08:20 GMT

You are absolutely correct.

Only 2 ip addresses can be used for NATing and if you have any subsequent packet that needs to be translated, then it will fail unless if you configure PAT, eg:

global (outside) 2 interface

OR/

global (outside) 2 67.75.236.195