topic remove NAT and ACL in Network Security

remove NAT and ACL

brentz — Tue, 12 Mar 2019 01:19:43 GMT

I have an NAT from my outside interface to a server on the inside. It also has an ACL that allows port 80. I need to remove this configuration. Which part is removed fist the NAT or ACL? Should do a clear local host when they are both removed?

Thanks

Brent
Sent from Cisco Technical Support iPad App

remove NAT and ACL

Jouni Forss — Mon, 25 Mar 2013 19:26:56 GMT

Hi,

I dont think it really matter which you remove first if you are simply removing a single Static NAT / Static PAT and a ACL rule line meant for that NAT.

They arent tied to eachother

However if you have a NAT statement which uses an ACL then you would remove the NAT first and then the ACL. I dont think the ASA would probably let you even remove the ACL if its in use by some NAT configuration.

You can post the configuration to be removed here if you want. Remove complete public IP address before posting.

- Jouni

remove NAT and ACL

Jouni Forss — Mon, 25 Mar 2013 19:28:51 GMT

Also,

You should be able to use the "show xlate | inc " and possibly also the "show local-host " to confirm if the NAT is still active for the host in question.

Naturally take care with clearing xlate/local-host if the host is something that is critical since you might possible clear/teardown connections to the said host in the process-

- Jouni