Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco ASA 5505 no nat

Hi all!

Can I disable nat at all. I mean comand like this:

no nat (inside) 1 0.0.0.0 0.0.0.0

I want to use my device like router.

Does it work?

(I did access-lists and bind it to interfaces.)

Everyone's tags (3)
2 ACCEPTED SOLUTIONS

Accepted Solutions
Cisco Employee

Cisco ASA 5505 no nat

Yes you can, and also you would need to disable "nat-control" with the command:

no nat-control

For the ASA to act like a router, please also configure the ASA interfaces in the same security level. If they have different security level, you would need to configure static 1:1 NAT to itself to not NAT the traffic.

Then also configure:

same-security permit inter-interface

Cisco Employee

Cisco ASA 5505 no nat

"nat-control" by default is disabled on the real ASA. So depends on whether you have that enabled before, you might need to disable it.

Otherwise, yes, it will work on the real device too.

3 REPLIES
Cisco Employee

Cisco ASA 5505 no nat

Yes you can, and also you would need to disable "nat-control" with the command:

no nat-control

For the ASA to act like a router, please also configure the ASA interfaces in the same security level. If they have different security level, you would need to configure static 1:1 NAT to itself to not NAT the traffic.

Then also configure:

same-security permit inter-interface

New Member

Cisco ASA 5505 no nat

Hi, Jennifer.

I emulate this situation on the GNS, and if I do

no nat (inside) 1 0.0.0.0 0.0.0.0

and right access-list  comunication is work.

Do You mean that it is not working at a real device?

Cisco Employee

Cisco ASA 5505 no nat

"nat-control" by default is disabled on the real ASA. So depends on whether you have that enabled before, you might need to disable it.

Otherwise, yes, it will work on the real device too.

6507
Views
0
Helpful
3
Replies
CreatePlease login to create content