topic Multiple PAT in PIX 525 in Network Security

Multiple PAT in PIX 525

carlos.zelayandia — Fri, 21 Feb 2020 06:04:46 GMT

Dear Sirs,

we`re using Cisco Secure PIX Firewall Version 5.2(8), and we neeed to configure multiple PAT.

we try to put it with the command

global (outside) 1 x.y.z.a netmask 255.255.255.0

for the first statement and

global (outside) 1 a.c.d.e netmask 255.255.255.0

for the second IP PAT.

But we don`t see any translation over the second one, just around the first one.

Is there a special configuration to performing the operation on PIX or is an automatic process?

Is a round robin process between PAT IP address?

Thanks in advance

Our PIX is a 525.

Thanks

Carlos.

Re: Multiple PAT in PIX 525

johnbroadway — Thu, 30 May 2002 13:30:43 GMT

I think the problem is that because the PAT can cope with many IP addresses you haven't reached the limit yet.

What you could try is having a Global (outside) 1 and a Global (outside) 2 with different addresses, then have a NAT 1 and a NAT 2 on the inside capturing different source addresses. This would then put the NAT 1 to Global 1 and 2 to 2 etc.

Re: Multiple PAT in PIX 525

rgrcommo — Mon, 03 Jun 2002 04:39:25 GMT

First I would upgrade to image 6.xx

do you have nat (inside) 1 0.0.0.0 0.0.0.0 0 0 in your conf?

this should work, make sure you have the statics configured and the route to that network a.c.d.e or the second global.