I'm not sure about this, but it's worth a try. I would guess that the NAT-ID's are used in order of their number, so NAT-ID 1 is used before NAT-ID 2.
Therefore, try to type in your NAT and GLOBAL commands like this: global (outside) 1 212.100.128.50 global (outside) 2 212.100.128.100-212.100.128.200 nat (dmz) 1 0 0 nat (inside) 1 123.123.144.251 255.255.255.255 nat (inside) 2 0 0 Hth, Ole ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Ole Drews Jensen Systems Network Manager CCNP, MCSE, MCP+I RWR Enterprises, Inc. [EMAIL PROTECTED] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ http://www.RouterChief.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Need a Job? http://www.OleDrews.com/job ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -----Original Message----- From: Arni V. Skarphedinsson [mailto:[EMAIL PROTECTED]] Sent: Wednesday, April 10, 2002 3:29 PM To: [EMAIL PROTECTED] Subject: RE: PIX + NAT Question [7:41022] the nat "(inside) 2 123.123.144.251 255.255.255.255 0 0" is somthing I added to try to get the host 123.123.144.251 to PAT to the .50 address, but that4s not working, the network connected to the inside interface is 123.123.144.0/24 the "nat (inside) 2 10.100.0.0 255.255.0.0 0 0" statment is what I use to PAT the 10.100.0.0 network and that works, ? so how do I ad the single host from the other network ??? Tahnx for the information Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=41114&t=41022 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]