Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Here's an easy one !

Is it possible to have 2 nat 0 entries for the same interface? For example:

nat (vpntest) 0 access-list 113

nat (vpntest) 0 access-list 115

Hope this is correct. If so, I've answered my two previous questions in regard to implementing 2 VPN's on the same PIX, which I'll share with everyone.

Tai

2 REPLIES

Re: Here's an easy one !

Hi,

the second nat command will overwrite the first one.

Isn't it possible to combine the statements in both ACLs into one single ACL?

Kind Regards,

Tom

Community Member

Re: Here's an easy one !

Thanks, I found that out first hand. I knew it sounded too good to be true!

I simply made an ACL for 117, which included both 113 & 115. I then did:

nat (vpntest) 0 access-list 117

91
Views
0
Helpful
2
Replies
CreatePlease to create content