You will want to use the overload parameter. Here is the syntax, notice that
the overload parameter is optional:
ip nat inside source {list {access-list-number | name} pool name [overload]
| static local-ip global-ip}
Here is what overload does:
"You can conserve addresses in the inside global address pool by allowing
the router to use one global address for many local addresses. When this
overloading is configured, the router maintains enough information from
higher-level protocols (for example, TCP or UDP port numbers) to translate
the global address back to the correct local address. When multiple local
addresses map to one global address, the TCP or UDP port numbers of each
inside host distinguish between the local addresses."
Regards,
David Wolsefer
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Benjamin Walling
Sent: Monday, December 11, 2000 7:52 AM
To: [EMAIL PROTECTED]
Subject: Behavior of Cisco PAT/NAT?
If I set up a NAT pool of only 1 address, the router/pix uses PAT. Under
PAT, I can have 65K hosts (or connections from hosts) connecting to the
internet.
If I set up a NAT pool of more than 1 address, the router/pix uses NAT.
Under NAT, I can have 1 host per address in the NAT pool.
Does this sound right? I have two available address to get my users out
with. If I put them both in a pool, will I only get two out at a time, or
will it allow 65K connections per address in the pool? The documentation
seems fuzzy on this.
_________________________________
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
