topic Re: nat (inside) 0 in Network Security

nat (inside) 0

d.waltz — Mon, 11 Mar 2019 09:12:28 GMT

I am trying to input a statement into a pix running 7.06 that we had in in a 6.3.4 version pix. The statement is as follows: nat (inside) 0 access-list no-nat

I get this error message on the console.

ERROR: access-list has protocol or port

We do have a large access-list no-nat already in the pix. Here is an example.

access-list no-nat extended permit ip 10.238.0.0 255.255.252.0 10.1.0.0 255.255.0.0

Can't figure out why the command will not take... any help would be appreciated.

Re: nat (inside) 0

m-haddad — Fri, 22 Dec 2006 19:08:13 GMT

Hello,

With the nat0 you can't match protocols in the ACL. Check all your no-nat access-list lines. it seems there is a line that is matchinh protocls such as tcp or udp and port numbers.

Let me know if this solves your probem,

Appreciate your rating,

Regards,

Re: nat (inside) 0

d.waltz — Wed, 27 Dec 2006 15:36:19 GMT

Thanks for the suggestion. Found an icmp statement that had a echo at the end. Took those statements out and the nat (inside) 0 went in ok this time.

Re: nat (inside) 0

m-haddad — Wed, 27 Dec 2006 17:12:49 GMT

Good to know it is working now.

Appreciate your rating,

Regards,