Notice in the topology there are 3 network ranges that would be translated based on the ACL created, if more than 2 devices attempt to access the Internet, the additional devices would be denied access until one of the previous translations timed out freeing up an address to use.