Cisco 7604 Configuration Guide - Page 327

Chapter 16 Configuring NAT Figure 16-17 Different NAT IDs Web Server: www.cisco.com Using Dynamic NAT and PAT Outside Global 1: 209.165.201.3209.165.201.10 Global 2: 209.165.201.11 Translation 192.168.1.14 209.165.201.11:4567 Translation 10.1.2.27 209.165.201.3 NAT 1: 10.1.2.0/24 NAT 2: 192.168.1.0/24 Inside 132927 10.1.2.27 192.168.1.14 See the following commands for this example: hostname(config)# nat (inside) 1 10.1.2.0 255.255.255.0 hostname(config)# nat (inside) 2 192.168.1.0 255.255.255.0 hostname(config)# global (outside) 1 209.165.201.3-209.165.201.10 hostname(config)# global (outside) 2 209.165.201.11 You can enter multiple global commands for one interface using the same NAT ID; the FWSM uses the dynamic NAT global commands first, in the order they are in the configuration, and then uses the PAT global commands in order. You might want to enter both a dynamic NAT global command and a PAT global command if you need to use dynamic NAT for a particular application, but want to have a backup PAT statement in case all the dynamic NAT addresses are depleted. Similarly, you might enter two PAT statements if you need more than the approximately 64,000 PAT sessions that a single PAT mapped statement supports. (See Figure 16-18.) OL-20748-01 Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM 16-23