natting to a pool of addresses

[ozgurg]

here is my problem.

if i use the command...

global (outside) 1 209.165.201.1-209.165.201.10 netmask 255.255.255.224

first 10 hosts are translated sequentially to .1 through .10,

but the 11th host is not translated.!!

unless i define an extra pat statement under that one.

i want the 11th host to take .1 again.

12 th .2 and so on...

is that possible?

best regards...

[bdube]

No, that kind of algorithm isn't supported. The PIX takes the first available IP address in the NAT pool, if there isn't, it takes the PAT. If you don't configure PAT and the 11th simultaneuous connection arrives, the PIX cannot kicked out a previous one, there isn't any priority mechanism for this.

Regards

Ben