Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA ACL Issue

Hi all,

I have managed to narrow down a problem that has been impacting our VPN users, the first line of the following config is missing from the current config:

nat (inside) 0 access-list nat0_outbound

nat (inside) 1 0.0.0.0 0.0.0.0

nat (dmz) 1 192.168.10.0 255.255.255.0


My question is, what is the command to put that first line back into the config? Thanks all.

Everyone's tags (4)
1 ACCEPTED SOLUTION

Accepted Solutions
VIP Purple

Re: ASA ACL Issue

This line is used to exempt your VPN-traffic from being NATed (together with the ACL nat0_outbound where your VPN-traffic should be defined). Just paste in the missing command:

asa# conf t

asa(config)# nat (inside) 0 access-list nat0_outbound

asa(config)# exit

asa# copy run start

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni


--
Don't stop after you've improved your network! Improve the world by lending money to the working poor: http://www.kiva.org/invitedby/karsteni
3 REPLIES
New Member

ASA ACL Issue

I've worked this one out and added the line of config back in.

VIP Purple

Re: ASA ACL Issue

This line is used to exempt your VPN-traffic from being NATed (together with the ACL nat0_outbound where your VPN-traffic should be defined). Just paste in the missing command:

asa# conf t

asa(config)# nat (inside) 0 access-list nat0_outbound

asa(config)# exit

asa# copy run start

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni


--
Don't stop after you've improved your network! Improve the world by lending money to the working poor: http://www.kiva.org/invitedby/karsteni
New Member

Re: ASA ACL Issue

Thanks Karsten, that is what I eventually ended up doing, but thanks for the clarification.

300
Views
0
Helpful
3
Replies
CreatePlease login to create content