NAT and any statement

Unanswered Question
Sep 24th, 2007

Hello everybody,

I have many networks that I need to NAT.

I don't know exactly what are these networks so, I tried to nat with an 'any' statment in my ACL.

But, it doesn't works (

So I am looking to do this by using a route-map with a 'match interface' condition.

Has anybody tried this before ?

interface GigabitEthernet 0/0

ip nat inside

interface GigabitEthernet 0/1

ip nat outside

route-map NATme permit 10

match interface GigabitEthernet 0/0

ip nat pool NAT-pool prefix-length 29 type rotary

ip nat inside source route-map NATme pool NAT-pool

Thanks !

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
ohassairi Mon, 09/24/2007 - 03:55

if you don't know the origin of the paquet, just use an opened acl :acess-list 1 permit any any.

but: be sure g0/0 and 0/1 are L3 and you have a static route that route the trafic through g0/1

Paolo Bevilacqua Mon, 09/24/2007 - 11:07

Hi, as mentioned by the poster and documented per link above, access-list any is not to be used with nat and in fact I found that for source, it causes problems.

benoit.lecompt Tue, 09/25/2007 - 01:10

Yes, but it will become an any any statment:

ip access-list standard 10


s ip access-lists 10

Standard IP access list 10

permit any


Paolo Bevilacqua Sat, 10/13/2007 - 02:41

Now try to telnet to the router from outside to the outside interface. If it works, you are ok.

Inability to do so, is the 'unexpected behavior' mentioned.


This Discussion