topic Cisco ASA 5505 no nat in Network Security

Cisco ASA 5505 no nat

andrey.v.tyurin — Fri, 21 Feb 2020 12:39:28 GMT

Hi all!

Can I disable nat at all. I mean comand like this:

no nat (inside) 1 0.0.0.0 0.0.0.0

I want to use my device like router.

Does it work?

(I did access-lists and bind it to interfaces.)

Cisco ASA 5505 no nat

Jennifer Halim — Mon, 28 May 2012 03:04:10 GMT

Yes you can, and also you would need to disable "nat-control" with the command:

no nat-control

For the ASA to act like a router, please also configure the ASA interfaces in the same security level. If they have different security level, you would need to configure static 1:1 NAT to itself to not NAT the traffic.

Then also configure:

same-security permit inter-interface

Cisco ASA 5505 no nat

andrey.v.tyurin — Mon, 28 May 2012 04:09:05 GMT

Hi, Jennifer.

I emulate this situation on the GNS, and if I do

no nat (inside) 1 0.0.0.0 0.0.0.0

and right access-list comunication is work.

Do You mean that it is not working at a real device?

Cisco ASA 5505 no nat

Jennifer Halim — Mon, 28 May 2012 06:15:53 GMT

"nat-control" by default is disabled on the real ASA. So depends on whether you have that enabled before, you might need to disable it.

Otherwise, yes, it will work on the real device too.