topic PIX NAT in Network Security https://community.cisco.com/t5/network-security/pix-nat/m-p/617753#M1036792 <P>We have a PIX with 3 interface, 1. Inside, 2. Outside, 3. DMZ. </P><P></P><P>In the DMZ there is a VPN Concentrator which has a site-to-site VPN with another site. How should I write the nat statements so that all VPN traffic is not natted, but everything else is.</P><P></P><P>The problem is I have written the ACL, but cannot no nat or NAT0 the ACL because some addresses in it need to be natted.</P> Mon, 11 Mar 2019 09:01:30 GMT lquin1978 2019-03-11T09:01:30Z PIX NAT https://community.cisco.com/t5/network-security/pix-nat/m-p/617753#M1036792 <P>We have a PIX with 3 interface, 1. Inside, 2. Outside, 3. DMZ. </P><P></P><P>In the DMZ there is a VPN Concentrator which has a site-to-site VPN with another site. How should I write the nat statements so that all VPN traffic is not natted, but everything else is.</P><P></P><P>The problem is I have written the ACL, but cannot no nat or NAT0 the ACL because some addresses in it need to be natted.</P> Mon, 11 Mar 2019 09:01:30 GMT https://community.cisco.com/t5/network-security/pix-nat/m-p/617753#M1036792 lquin1978 2019-03-11T09:01:30Z Re: PIX NAT https://community.cisco.com/t5/network-security/pix-nat/m-p/617754#M1036812 <HTML><HEAD></HEAD><BODY><P>Base your no-nat acl on source and destination. This way if the traffic does not match that rule it will be nat'd. </P></BODY></HTML> Tue, 28 Nov 2006 17:25:11 GMT https://community.cisco.com/t5/network-security/pix-nat/m-p/617754#M1036812 mgaysek 2006-11-28T17:25:11Z