PIX- NAT w/multiple Class C

[jdonovan]

greetings

Can i assign 3 non-contiguous class C addresses for one NATed statement?

ex:

Global (outside) 12 209.92.1.25-209.92.1.250 netmask 255.255.255.0

Global (ouside) 12 209.93.1.25-209.92.1.250 netmask 255.255.255.0

Global (ouside) 12 209.94.1.25-209.92.1.250 netmask 255.255.255.0

Global (outside) 12 209.92.1.24 netmask 255.255.255.0

Global (outside) 12 209.93.1.24 netmask 255.255.255.0

Global (outside) 12 209.94.1.24 netmask 255.255.255.0

nat (inside) 12 192.200.0.0 255.255.0.0 0

* i want to reserve some of the addresses in the front and the back of each block for static mapping. Is this the correct configuration? the 3 PAT statements are there for padding. Do you think 1 PAT would work as well?

Thanks for the input

[David White]

Yes, your example will work just fine.

The only reason to have more than 1 PAT statement is if you believe the number of connections on that PAT will exceed - say 60,000. Once one PAT address is used up, the PIX will roll-over to the next available PAT address. If the first PAT address does not get used up, the PIX will not roll-over.

Hope that helps,

David.