Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

how to make asa to pass everything trough it?

Hi

how can I make ASA to let everything go trough it? everything should be allowed from outside to inside and vice versa. Should I make a static nat for the whole public network or just with access lists?

1 REPLY
Silver

Re: how to make asa to pass everything trough it?

There are two options.

1) Use following commands:

access-list nonat permit ip any any

nat (inside) 0 access-list nonat

access-list 101 permit ip any any

access-group 101 in interface outside

2) Use following commands:

static (inside,outside) 192.168.1.0 192.168.1.0 netmask 255.255.255.0

access-list 101 permit ip any any

access-grup 101 in interface outside

I would prefer the first method as there will be no translations formed in it and I dont have to specify all the networks using the static command.

Hope that helps.

Regards,

Vibhor.

111
Views
5
Helpful
1
Replies
CreatePlease to create content