when i doing global NAT then show error message

[SK Faisal]

interface Ethernet0/0

security-level 0

nameif outside

ip address 200.200.200.1 255.255.255.252

exit

interface Ethernet0/1

security-level 100

nameif inside

ip address 192.168.1.1 255.255.255.0

!

!

nat (inside) 1 192.168.1.0 255.255.255.0

global (outside) 1 200.200.200.1

Error: 200.200.200.1-200.200.200.1 overlaps with outside interface address

route outside 0.0.0.0 0.0.0.0 200.200.200.2 1

dhcpd ping_timeout 3000

!

dhcpd address 192.168.1.2-192.168.1.254 inside

dhcpd enable inside

!

threat-detection basic-threat

[Jouni Forss]

Hi,

When you use the "outside" interface IP address on the Dynamic PAT configuration with the "global" command then you use the keyword "interface" instead

For example

global (outside) 1 interface

It will  then use the IP address you mention.

Hope this helps

Please remember to mark the reply as the correct answer if it answered your question.

Ask more if needed

- Jouni

[SK Faisal]

global (outside) 1 interface

global for this range already exists

[Jouni Forss]

Hi,

Well then you already have some existing configuration using the interface IP address.

Can you share the output of

show run global

show run nat

- Jouni

[SK Faisal]

ciscoasa(config)# sh run global

global (outside) 1 interface

ciscoasa(config)# sh run nat

nat (inside) 1 192.168.1.0 255.255.255.0

[cadet alain]

Hi,

can you try clear configure nat and then renter the nat statements with the global one referencing the interface.

Regards

Alain

Don't forget to rate helpful posts.

[Jouni Forss]

Hi,

You dont really have any need to add the configuration

global (outside) 1 200.200.200.1

Since you already have

global (outside) 1 interface

And they are the same

global (outside) 1 interface = global (outside) 200.200.200.1

I am not sure what you want to do here since you are trying to add a configuration command that you actually have already on the device.

If you want to add more source network under the same Dynamic PAT then you can use the format

nat () 1

Where you naturally replace the

• = with the "nameif" of the interface where the source network resides
• = with the source networks network address
• = with the network mask of the source network being added

Hope this helps

If this hasnt already answered your question then please specify what you are trying to achieve exactly.

- Jouni