NAT Vs. PAT

[jdl508]

I have a quick question I would like to ask,
Which is the prefered method of address translation on a pix nat or pat?
I understand there differences and it seems PAT is the obvious choice. my senerio is a pix 515 with 2 dmz's planning natting 1 dmz (only 1 server) and pat on dmz2 (5 servers) Is this possible? I know i could also have a global pool of NAT. Is NAT more secure? Thanks
jon

 

[ChrisAC]

It all depends on your set-up. If your 5 servers on DMZ 2 need to be accessible from the internet then you really could do to be using NAT, a static map for each server, public to private IP.

PAT is best used on the outside interface for all connections from the internal network.

i.e. global (outside) 1 interface

Always try to save IP's where you can!!

Chris.
************************
Chris Andrew, CCNA
chrisac@gmx.co.uk
************************

 

[jdl508]

It sounds like in my senario i should / will use PAT for my corp network (seperate FW) over 150 users and will use NAT for my 2 dmz's consisting of under 10 servers thanks so much chris