topic Re: Multiple PAT in PIX 525 in Network Security

Multiple PAT in PIX 525

carlos.zelayandia — Fri, 21 Feb 2020 06:04:45 GMT

Dear Sirs,

we`re using Cisco Secure PIX Firewall Version 5.2(8), and we neeed to configure multiple PAT.

we try to put it with the command

global (outside) 1 x.y.z.a netmask 255.255.255.0

for the first statement and

global (outside) 1 a.c.d.e netmask 255.255.255.0

for the second IP PAT.

But we don`t see any translation over the second one, just around the first one.

Is there a special configuration to performing the operation on PIX or is an automatic process?

Is a round robin process between PAT IP address?

Thanks in advance

Our PIX is a 525.

Thanks

Carlos.

Re: Multiple PAT in PIX 525

r.nair — Wed, 29 May 2002 22:45:54 GMT

The PAT statements shall be for different IDs; i.e for different network segments.

Re: Multiple PAT in PIX 525

srittenberg — Wed, 29 May 2002 23:55:30 GMT

Your statement looks correct. When using second IP for PAT address, it's act as a backup, you will not see the second PAT being used till the first one running out of port numbers. It supports (in pratical sense) up to 4000 port translations.