| 9.2 |  | Network Address Translations |
| 9.2.3 |  | Static inside translations |

| Overview of Static Inside Translations Unlike dynamic inside translations, which assign an inside host an IP address randomly from a global pool, static inside translations assign a specific outside IP address to a specific inside host . This means that every time a given inside host leaves the inside network, it will be assigned the same outside IP address. Static inside translations should, therefore, be used when it is necessary for an inside host to always appear with a fixed address on the PIX Security Appliance global network. The following are guidelines for using static translations:

- Use the

static command for outbound connections to ensure that packets leaving an inside host are always mapped to a specific global IP address, such as an inside DNS or SMTP host.
- Use the
static command alone for outbound connections that must be mapped to the same global IP address.
- Static translations should not be created with overlapping IP addresses. Each IP address should be unique.
- The PIX Security Appliance can support static and dynamic translations simultaneously, but be aware that
statics take precedence over nat and global command pairs.
- If a global IP address will be used for port address translation (PAT), do not use the same global IP address for a static translation.

Figure illustrates how static inside translations operate.