nat statements on my PIX 520

[Kevin Melton]

I have the following two statements on the config on my PIX 520:

nat (inside) 0 access-list 100

nat (inside) 1 0.0.0.0 0.0.0.0 0 0

I understand that my predecesor built our Access-list 100 as the tunnels for our VPN to our clients. But i do not know what the purpose of the 2nd NAT is.

Pls help...

[teemc · Accepted solution]

The nat 0 statement specifies addresses that will not be translated.

The nat 1 statement with all 0s indicates that any address will be translated to a global address. (except for nat 0)

Access-list 100 should be your source and destination networks for vpn.