nat (inisde) 0 and static configuration.

Unanswered Question
Sep 27th, 2009


We need to do following configuration for nat (inside) 0 nonat and static for the same host.

We are configuring Site-to-site VPN between two hosts.


host2= p.q.r.s ( at destination location )

For this following configuration is proposed :

access-list nonat permit ip host a.b.c.d host p.q.r.s

nat (inside) 0 access-list nonat.

In another requirement it is required that this host a.b.c.d needs to be accessed from outside on some of the ports. For that we plan to add following static entry

static (inside,outside) Public-Static_IP a.b.c.d

And corresponding permit access list on outside interface.

Will this work together as same host is being accessed in two processes.

Please share the experience.

Can such configuration is possible on ISR 3800 series?

Thanks in advance.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)


This Discussion