topic Re: Multiple PAT address in Network Security

Multiple PAT address

Muhammed AKYUZ — Mon, 11 Mar 2019 19:03:59 GMT

Is that possible to make multiple pat addresse on ASA?

Re: Multiple PAT address

Collin Clark — Wed, 03 Nov 2010 13:50:35 GMT

Yes it is possible.

Re: Multiple PAT address

Muhammed AKYUZ — Wed, 03 Nov 2010 13:54:32 GMT

what i mean is oveloading on an interface with 2 ip addresses.

do you have any documantation for that?

Re: Multiple PAT address

Collin Clark — Wed, 03 Nov 2010 13:58:59 GMT

There are a couple of options. Can you be more specific on what you need to achieve?

Re: Multiple PAT address

Muhammed AKYUZ — Wed, 03 Nov 2010 14:05:38 GMT

Ok.

we have internet connection. our lan ip addresses are PAT ed on ASA with one ip address. but some of the clients should use another ip adressto reach internet. I want to use another ip address from our internet IP adresses.

Re: Multiple PAT address

Collin Clark — Wed, 03 Nov 2010 14:14:14 GMT

OK. You would want to setup to NAT Pools-

global (outside) 1 75.50.95.73

global (outside) 2 75.50.95.77

nat (inside) 1 192.168.1.5

nat (inside) 2 0.0.0.0 0.0.0.0.0

This would NAT the internal IP of 192.168.1.5 to 75.50.95.73 and everyone else on the internal network to 75.50.95.77. If you have more than a few clients with the special NAT, you can use an ACL instead of the host address.

Here is the configuration guide [8.2] on configuring NAT-

http://www.cisco.com/en/US/partner/docs/security/asa/asa82/configuration/guide/nat_staticpat.html

Hope it helps.

Re: Multiple PAT address

Muhammed AKYUZ — Thu, 04 Nov 2010 07:06:15 GMT

Hi,

The solution that you provided works.

I have another question.

Now, I have one group and will use one nat.

but at global config:

global (INTERNET) 1 192.168.4.244 netmask 255.255.255.0
global (INTERNET) 1 192.168.4.245 netmask 255.255.255.0

The users always use 192.168.4.244.. is that possible to make it ramdom. one user or session 244 another 245...

Thank you.

Re: Multiple PAT address

Collin Clark — Thu, 04 Nov 2010 14:17:51 GMT

For that you would need to use a pool and even then it doesn't use a round robin or anything. The first client gets the first IP, second client gets the 2nd IP and so on until all the IP's are used. It will then PAT on that last IP.

Re: Multiple PAT address

Muhammed AKYUZ — Thu, 04 Nov 2010 16:44:16 GMT

Hi,

Both first and scond ip goes the first IP. >192.168.4.244

PAT Global 192.168.4.244(1308) Local 111.1.1.2(51534)
PAT Global 192.168.4.244(1307) Local 111.1.1.2(50743)
PAT Global 192.168.4.244(1133) Local 111.1.1.2(49473)
PAT Global 192.168.4.244(1306) Local 111.1.1.2(63708)
PAT Global 192.168.4.244(3) Local 111.1.1.2 ICMP id 1
PAT Global 192.168.4.244(1157) Local 111.1.1.10(1060)
PAT Global 192.168.4.244(1156) Local 111.1.1.10(1059)
PAT Global 192.168.4.244(1155) Local 111.1.1.10(1058)
PAT Global 192.168.4.244(1154) Local 111.1.1.10(1057)