topic nat (interface) 0 access-list 100 command erase automatically after reboot in Network Security

nat (interface) 0 access-list 100 command erase automatically after reboot

manik.palekar — Mon, 11 Mar 2019 12:01:47 GMT

I have used nat0 command to transfer outside ip address directly to inside users.But whenever my pix reboots

nat (Interface) access-list 100 command erase automatically& i will have to reconfigure it every time by changing access list name .Please guide me to resolve it permentaly.

Re: nat (interface) 0 access-list 100 command erase automaticall

abinjola — Tue, 12 Feb 2008 13:38:59 GMT

you make this configuration via ASDM ? are those host/network being named ?

what version you running ?

Re: nat (interface) 0 access-list 100 command erase automaticall

manik.palekar — Wed, 13 Feb 2008 13:19:09 GMT

hi ..

i did it by console..version 7.1 is used.i didnt get your 2nd point.

sample config...

# nat (inside) 0 access-list 100

# access-list 100 permit ip any 145.xx.xx.xx

Thanks...

Re: nat (interface) 0 access-list 100 command erase automaticall

abinjola — Wed, 13 Feb 2008 14:51:08 GMT

looks like a bug to me..is upgrade possible for you ?

Re: nat (interface) 0 access-list 100 command erase automaticall

cisco24x7 — Wed, 13 Feb 2008 15:09:36 GMT

That's the price you pay for running Early

Deployment (ED) code. These are 'beta' code

as far as I am concerned.

The question is: is downgrade possible for you?

You should be running 7.0(7) because it is

General Deployment (GD) code.

CCIE Security

Re: nat (interface) 0 access-list 100 command erase automaticall

abinjola — Wed, 13 Feb 2008 15:21:27 GMT

I would suggest for an upgrade to 7.2.3 which is quite stable and was an end to all the 7.2.x interims.

Re: nat (interface) 0 access-list 100 command erase automaticall

cisco24x7 — Wed, 13 Feb 2008 15:45:31 GMT

Is version 7.2(3) ED or GD?

I would STRONGLY recommed staying from any

ED code. They are just not stable.

my 2c.

Re: nat (interface) 0 access-list 100 command erase automaticall

abinjola — Wed, 13 Feb 2008 16:04:10 GMT

hello Requester..7.0.3 doesn't support many features like U-turning of clear text traffic,PPOE,and many other...you are safe to to go 7.2.3 as this was a dead end for all interims on 7.2.x and has been quite stable...if you want to go to 7.0.7 (GD) you will loose many feature set..choice is yours.