Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

NAT Exemption

Hi Experts,

I have two interface dmz(S. level 90) and wan(s. level 60) i have two nat exemption rule

nat (dmz) 0 0.0.0.0 0.0.0.0

nat (wan) 0 0.0.0.0 0.0.0.0

i have one another static nat rule:

static(dmz,wan) 10.10.10.10 10.10.10.10

when i try to removing this natting rule, i get connection loss from wan..

after adding same static rule again get connection from wan to dmz..

please revert with proper solution to exempt nat.

Thanks in advance.........

Amit

5 REPLIES

Re: NAT Exemption

Amit,

A better way of doing what you are trying to acheve, is policy based NAT, something like:-

nat (dmz) 0 access-list DMZ_WAN

access-list DMZ_WAN extended permit ip <> <>

What hardware are you running? What version of code are you running?

HTH.

Gold

Re: NAT Exemption

is nat-control enabled?

Community Member

Re: NAT Exemption

yes nat-control enabled.....

Community Member

Re: NAT Exemption

I believe is you do a no nat-control then you wont need any NAT statements because you are trying to push traffic from DMZ to wan with is a lower security level and with NAT-control no enabled that traffic will not get NAT'd anyways.

Community Member

Re: NAT Exemption

Thnks for ur reply...

now i got another major solution that is not documneted on cisco site, i taking confimration from cisco for same changes.

now i am closing this coversation

141
Views
0
Helpful
5
Replies
CreatePlease to create content