topic Re: PIX with multiple NAT 0 statements in Network Security

PIX with multiple NAT 0 statements

s.vidanovic — Fri, 21 Feb 2020 05:49:00 GMT

Hello,

I have PIX 6.0 with IPSec support. I have nat 0 statement with access lists between dmz and inside interface. Now, I want to introduce VPN client configuration. In order to do that, I need to have nat 0 statement. Is it possible to have more than one nat 0 statement with differnet access lists, or I should add access lists entries at the end of exisiting access list.

Re: PIX with multiple NAT 0 statements

brian.giaccone — Wed, 18 Jul 2001 17:05:48 GMT

NAT 0 statement - I wanted to do the exact same thing. The only recourse was to add to my existing access list.

Re: PIX with multiple NAT 0 statements

ashariff — Wed, 18 Jul 2001 19:26:14 GMT

You can only have one nat 0 statement but you can have multiple nat statements. e.g.

nat (inside) 0 access-list ipsec

nat (inside) 1 172.27.0.0 255.255.0.0 0 0

access-list ipsec permit ip 172.27.0.0 255.255.0.0 172.16.0.0 255.255.0.0

access-list ipsec permit ip 172.27.0.0 255.255.0.0 172.18.0.0 255.255.0.0

Hope this helps.

Re: PIX with multiple NAT 0 statements

s.vidanovic — Thu, 19 Jul 2001 06:54:25 GMT

And, when you add entry to your existing list, is everything OK? I mean, in the same time you have your traffic encrypted and your old access list is working ?