PIX Nat Zero vs Global PAT

[jason.aarons]

Will PC 10.16.232.11 get the global pat going outbound (10.16.8.247) or the static (10.16.9.101)? I need it to get the static.

Should I add a "nat 0" for 10.16.232.11?

global (outside) 1 10.16.8.247

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

static (inside,outside) 10.16.9.101 10.16.232.122 netmask 255.255.255.255 0 0

PIX 6.3(1)

[jason.aarons]

Typo, the pc is actually 10.16.232.122, the nat 0 would be for 10.16.232.122

[scoclayton]

A static command has a higher priority than a nat (intf) 1 command. So, yes...the 10.16.232.122 host will be translated via the static. Make sure you issue a 'cl xlate' after adding the static to clear out any existing translations the PC may already have.

Scott