[nsp] [nsp] IOS NAT more specific precedence

From: David Barnett (davidb@santacruz.k12.ca.us)
Date: Mon Feb 19 2001 - 13:30:04 EST


Hello,

Will nat let me choose from more than one pool if the address
being translated is matched by multiple "ip nat inside source list..."
statements but is more specifically matched by one list than
another? For example, would the address 10.26.52.2 choose
the 205.155.5/24 pool below:

ip nat pool schs 205.155.5.1 205.155.5.254 prefix-length 24
ip nat pool common 205.155.29.1 205.155.29.254 prefix-length 24
ip nat inside source list 20 pool schs
ip nat inside source list 40 pool common
access-list 20 permit 10.26.52.0 0.0.3.255
access-list 40 permit 10.0.0.0 0.255.255.255

My 7200 accepts the above config, but I won't be able to
test this until I take a PIX out, which is doing the
nat now. The PIX by the way does prefer the more specific,
while allowing overlapping inside address matches.

Perhaps the significant matter is the order that the
"ip nat inside source" statements.

Thanks for any help.

Dave Barnett

davidb@santacruz.k12.ca.us



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:29 EDT