| 9.5 |  | Port Address Translation (PAT) |
| 9.5.5 |  | Augmenting a global pool with PAT |

| It may sometimes be desirable to augment a global pool of IP addresses with PAT. This might occur if a network administrator feels that NAT is a better overall choice for the network, but worries that there will not always be sufficient IP addresses available to support it. In this instance, when all IP addresses from the global pool are in use, the PIX Security Appliance begins PAT using the single IP address shown in the second global command.

Figure shows hosts on the 10.0.0.0 internal network that are assigned addresses from the global pool 192.168.0.20--192.168.0.254 as they initiate outbound connections. When the addresses from the global pool are exhausted, packets from all hosts on network 10.0.0.0 appear to originate from 192.168.0.19.