Hi
I've got some PAT exhausted messages on an ASA 5585 running 8.4(2)
We are running NAT with PAT overload as follows:-
object network student
subnet 10.*.0.0 255.255.0.0
object network student-nat-pool
range 194.*.*.1 194.*.*.252
object network student-pat-2
host 194.*.*.253
object-group network student-nat-and-pat
network-object object student-nat-pool
network-object object student-pat-2
object network student
nat (any,outside) dynamic student-nat-and-pat
Is it possible to create the PAT object as a range rather than a single IP so we can have more than one PAT or do I need to split the source IP's. The other thing I was looking at is using the outside interface address when the PAT pool is exhausted.
Any advice gratefully received, I've been scouring the forums but can't see any examples of this.
Thanks
