cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
9079
Views
5
Helpful
3
Replies

Cisco ASA 5505 no nat

andrey.v.tyurin
Level 1
Level 1

Hi all!

Can I disable nat at all. I mean comand like this:

no nat (inside) 1 0.0.0.0 0.0.0.0

I want to use my device like router.

Does it work?

(I did access-lists and bind it to interfaces.)

2 Accepted Solutions

Accepted Solutions

Jennifer Halim
Cisco Employee
Cisco Employee

Yes you can, and also you would need to disable "nat-control" with the command:

no nat-control

For the ASA to act like a router, please also configure the ASA interfaces in the same security level. If they have different security level, you would need to configure static 1:1 NAT to itself to not NAT the traffic.

Then also configure:

same-security permit inter-interface

View solution in original post

"nat-control" by default is disabled on the real ASA. So depends on whether you have that enabled before, you might need to disable it.

Otherwise, yes, it will work on the real device too.

View solution in original post

3 Replies 3

Jennifer Halim
Cisco Employee
Cisco Employee

Yes you can, and also you would need to disable "nat-control" with the command:

no nat-control

For the ASA to act like a router, please also configure the ASA interfaces in the same security level. If they have different security level, you would need to configure static 1:1 NAT to itself to not NAT the traffic.

Then also configure:

same-security permit inter-interface

Hi, Jennifer.

I emulate this situation on the GNS, and if I do

no nat (inside) 1 0.0.0.0 0.0.0.0

and right access-list  comunication is work.

Do You mean that it is not working at a real device?

"nat-control" by default is disabled on the real ASA. So depends on whether you have that enabled before, you might need to disable it.

Otherwise, yes, it will work on the real device too.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: