cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
455
Views
0
Helpful
2
Replies

Disable nat on between two networks

robbhanMid
Level 1
Level 1

Hi,

How do I disable NAT between two networks on the same asa. Right now the NAT between my two networks 192.168.1.0/24 and 192.168.200.0/24 isn't working so I figured I could do without it.

Tried no nat-control without any luck.

Part of my config:

interface Vlan1

nameif inside

security-level 100

ip address 192.168.1.1 255.255.255.0

!

interface Vlan2

nameif outside

security-level 0

ip address * 255.255.255.248

!

interface Vlan3

nameif dmz

security-level 50

ip address 192.168.200.1 255.255.255.0

!

interface Ethernet0/0

switchport access vlan 2

!

interface Ethernet0/1

!

interface Ethernet0/2

!

interface Ethernet0/3

!

interface Ethernet0/4

!

interface Ethernet0/5

switchport access vlan 3

!

interface Ethernet0/6

!

interface Ethernet0/7

!

global (outside) 1 interface

nat (inside) 0 access-list inside_nat0_outbound

nat (inside) 1 0.0.0.0 0.0.0.0

nat (dmz) 1 0.0.0.0 0.0.0.0

static (dmz,outside) tcp interface ftp 192.168.200.2 ftp netmask 255.255.255.255

access-group inside_access_in in interface inside

access-group 8080_access_in in interface outside

access-group dmz_access_in in interface dmz

route outside 0.0.0.0 0.0.0.0 79.136.112.49 1

2 Accepted Solutions

Accepted Solutions

andrew.prince
Level 10
Level 10

Robert,

static (inside,dmz) 192.168.1.0 192.168.1.0 netmask 255.255.255.0

static (dmz,inside) 192.168.200.0 192.168.200.0 netmask 255.255.255.0

Or you could write a policy nat depending on src & dst networks.

HTH>

View solution in original post

cisco24x7
Level 6
Level 6

static (inside,dmz) 192.168.1.0 192.168.1.0 netmask 255.255.255.0

View solution in original post

2 Replies 2

andrew.prince
Level 10
Level 10

Robert,

static (inside,dmz) 192.168.1.0 192.168.1.0 netmask 255.255.255.0

static (dmz,inside) 192.168.200.0 192.168.200.0 netmask 255.255.255.0

Or you could write a policy nat depending on src & dst networks.

HTH>

cisco24x7
Level 6
Level 6

static (inside,dmz) 192.168.1.0 192.168.1.0 netmask 255.255.255.0

Review Cisco Networking products for a $25 gift card