Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

DMZ, Access rule, NAT exemption Topic

Hi all,

I've have one topic to discuss.

We have a ASA 5510 with a public /27 Network outside. Inside we have multipe Custumers, which need public Adresse to operate their own network.

I have only that /27 Network. Is it possible to give our custumers IP Adresses from the outside Interface and configure static identity NAT ? Or could I configure

NAT exemption? The Custumers want to do IP-Sec from their networks, so it could be problematic, to realize the common scenario with a natted DMZ.

Thank you for help.



DMZ, Access rule, NAT exemption Topic

Hi Richard,

All the customers will be accessing thru VPN only right?????. If that is the case you can have different private ranges inside your network and each can access their customers through vpn channel.

explain in detail about your requirement.

New Member

DMZ, Access rule, NAT exemption Topic


in the building we have a GE uplink and a lot off costumers (business). Some off them  need only Internet access and I configured PAT. Others need  fix public IP addresses for different Services (for Example inbound and outbound VPN tunnels, Mail Servers etc).

I have a public  /27 Network configured on the outside interface. Is it possible to use IP addresses from that /27 Network without NAT on the costumer firewall or Server?

Which is the best way  to realize that requirement?

CreatePlease to create content