Re: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-03 Thread Bullwinkle
May I suggest a quick and dirty lab to test the various theories that have been described in this thread. 1) Take a router, create four loopbacks with /32 masks out of the same /29 range. 2) set up your NAT pool with only two outside addresses. Then set the outside interface. Maybe shorten the ti

Re: Re: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Adam
This is what I have run into in the past and I was almost certain that it was not possible. I set it up in the lab here with various configs and had the same result. As far as I was told in the last routing update I attended at our local cisco office, the SE's there confirmed that the PIX can be d

Re: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Ben Woltz
I've found that you cannot do this, at least not when you do nat to a pool of addresses. You have to do static nat, then overload the rest. I tried adding overload to the end of my existing nat statment with the pool, it started PATing the addresses from the beginning. Instead of using the 1:1 f

Re: RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Adam
I knew this was possible on the pix, but have never configured it on an IOS router. It would be really appreciated if someone wouldn't mind posting a sample config as I cannot locate one on cisco's site or the netpro forum specific to IOS routers with both NAT and PAT configured like outlined in t

RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread ciscoGo2002
Thanks Symon, We really want to know more about the way the overload works... Maybe we were not so exactly as we wanted... We want to know how can we use PAT when any others publics ips are exhausted after using NAT? For example, if we configure this: ip nat inside source list pool overload H

RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Lee Carter
Yes you can just take your nat statement (ip nat inside source list 1...) and add the word overload on the end of the command. You will use a 1:1 NAT for the first set of users. Once your IP's are used up you will use PAT. It is important to note that some issues arise with PAT versus NAT like IPS

RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Symon Thurlow
Yes, this is a typical setup. Search cisco.com and you will find a sample config. Symon -Original Message- From: ciscoGo2002 [mailto:[EMAIL PROTECTED] Sent: 02 April 2003 11:58 To: [EMAIL PROTECTED] Subject: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672] Hello folks, I have question for

RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Andrew Larkins
The combination of both can be done without any issues. I would keep 1 IP from the assigned range for the PAT address and have the others as 1 - 1 translations. Andrew CCNP, CCDP, CSS1 -Original Message- From: ciscoGo2002 [mailto:[EMAIL PROTECTED] Sent: 02 April 2003 12:58 To: [EMAIL PROT

RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread Troy Leliard
Yes it can be done, you just need to redefine you pool, for 1-1 nat, use all but 1 of your available IP's, then do another nat with overload on the last ip address. =?iso-8859-1?q?ciscoGo2002?= wrote: > > Hello folks, > I have question for you, we want to do dynamic NAT > with a pool of 128 publi

RE: PAT AFTER NAT...IS IT POSSIBLE??? [7:66672]

2003-04-02 Thread richard dumoulin
Of course you can, but why not doing just PAT ? Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=66674&t=66672 -- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosur