From: netwrkx (netwrkx@myeastern.com)
Date: Thu Mar 04 2004 - 23:13:58 GMT-3
The pix will use all the NAT before any PAT. If you want dynamic NAT to be
assigned, to a specific range you can use different groups.
global (outside) 1 network1
global (outside) 2 network2
nat (inside) 1 network1
nat (inside) 2 network2
Use the PAT as a if all ip's are used backup, but understand that if the
connections are not PAT friendly...you want to make sure you don't get to
the PAT.
-TV
----- Original Message -----
From: "kurt" <kurt@cybernex.net>
To: <ccielab@groupstudy.com>
Sent: Thursday, March 04, 2004 12:38 PM
Subject: ot how do i pix dynamic addresses w/multiple subnets
> how do i pix dynamic addresses w/multiple subnets
> what's the best way to indicate a large pool
> of dynamic address ???
>
> something like this
>
> global (outside) 1 172.16.1.1-172.16.2.253
> global (outside) 1 172.16.2.254
>
> or this
>
> global (outside) 1 172.16.1.1-172.16.2.253 netmask place_right_mask_here
> global (outside) 1 216.73.255.254 netmask /32 or something
>
> _______________________________________________________________________
> Please help support GroupStudy by purchasing your study materials from:
> http://shop.groupstudy.com
>
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Thu Apr 01 2004 - 08:15:14 GMT-3