PAT and One-to-One NAT together

[Grant Powers]

I am trying to find a good way to one-to-one NAT certain private addresses that are already permitted in a  overload from the same pool used by PAT.

e.g.

access-list 5 permit 10.1.1.0 0.0.0.255

!

route-map Map-5

match ip address 5

!

ip nat pool pool-5 1.1.1.1 1.1.1.6 netmask 255.255.255.248

!

ip nat inside source route-map Map-5 pool pool-5 overload

!

ip nat inside source static 10.1.1.5 1.1.1.5

Would such a configuration work? Would that allow 10.1.1.5 to always use 1.1.1.5 but still do normal PAT for the other private and public addresses?

[paul driver · Accepted solution]

Hello

access-list 5 deny 10.1.1.5
access-list 5 permit 10.1.1.0 0.0.0.255

Res
Paul

Sent from Cisco Technical Support iPad App