PAT on PIX

[rakeshsharma3000]

If I have Backup PAT statements for my inside users to go out, when will the backup PAT statements be used.

for ex. global (outside) 1 82.x.x.1

global (outside) 1 82.x.x.2

when will 82.x.x.2 be used. What is the maximum limit on first PAT statement from Pix point of view not theorectical. Is there any load balancing done in case of certain applications which require certain specific ports.

[scoclayton · Accepted solution]

1) When will 82.x.x.2 be used?

A - When all ports on 82.x.x.1 are exhausted.

2) Max limit on first PAT?

A - 64K translations which is theoretical and practical provided the PIX has enough memory (which it does not).

3) Is there are load balancing done?

A - Nope.

The 2nd PAT statement is a waste of an address. The PIX will run out of memory long before it exhausts all the ports on a single PAT address. There are a number of factors that play into how many tranlations you can have with one address on a PIX but I can assure you,the number is quite high.

Hope this helps.

Scott