Re: global sequence

From: Tolulope Ogunsina <togunsina_at_gmail.com>
Date: Fri, 19 Feb 2010 09:22:48 +0100

Hi,
Yes, and the first 'pool' will be used as a backup only when the
second pool is exhausted.

From the ASA config guide:
"You can enter multiple global commands for one interface using the
same NAT ID; the security appliance uses the dynamic NAT global
commands first, in the order they are in the configuration, and then
uses the PAT global commands in order. You might want to enter both a
dynamic NAT global command and a PAT global command if you need to use
dynamic NAT for a particular application, but want to have a backup
PAT statement in case all the dynamic NAT addresses are depleted."

HTH,

On 2/19/10, rahe wum <waseela.mem_at_gmail.com> wrote:
> Hi,
>
> if we specify global statement in following sequence...
>
> global (outside) 1 interface
> global (outside) 1 192.168.100.100-192.168.100.200
>
> will the second pool be used ...
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Best Regards,
Tolulope.
Blogs and organic groups at http://www.ccie.net
Received on Fri Feb 19 2010 - 09:22:48 ART

This archive was generated by hypermail 2.2.0 : Mon Mar 01 2010 - 06:28:36 ART