Consequent NAT commands

[cdoidge]

Dear all,

Can you please explain what would happen if I implement 2 commands on external interface (providing that pool and route-maps are already defined as

ip nat pool mypool 192.168.10.1 192.168.10.1

access-list 1 permit 10.10.10.0 0.0.0.255

):

ip nat inside static 10.10.10.1 192.168.10.1

ip nat inside source list 1 pool mypool overload

Is it going to work - and if it is, how ?

Many thanks,

Alexander

[Georg Pauwen]

Hello Alexander,

the config will work, the only difference is that the static entry will be listed in the translation table right away, while the dynamic entries will be created only after an inside device initiates the communication. Hence, if no inside device ever initiates a conversation, no dynamic entries will be in the translation table, and outside-to-inside will not be possible.

Check the document below for a detailed discussion:

Configuring Static and Dynamic NAT Simultaneously

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080093f31.shtml

HTH,

GP