Can ASA use PAT if NAT pool is exhausted

[Christian.Fritz]

We are using a Cisco 5585 to do one to one NAT and have noticed that we are close to the total number of available IP addresses. Is there a way to use PAT as a fail safe if the NAT pool is exhausted? Thank you.

[Karsten Iwen · Accepted solution]

You can add the keyword "interface" at the end of your NAT-rule as a PAT-fallback:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/firewall/asa-firewall-cli/nat-objects.html#pgfId-1900029

[Christian.Fritz]

Thank you very much, exactly what was needed.