NAT exempt

m.bouwmeester — Mon, 11 Mar 2019 10:40:19 GMT

Hello,

Can somebody explain the difference between the commands:

static (inside,dms) 10.1.0.0 10.1.0.0 netmask 255.255.0.0

and

nat (inside) 0 access-list NoNat

access-list NoNat permit ip 10.1.0.0 255.255.0.0 any

After Updating from 7.x to 8.x the second command doesn't work anymore. Because there was no translation group.

Kind regards,

Martien

Re: NAT exempt

srue — Thu, 05 Jul 2007 12:49:52 GMT

access-list NoNat will cause ALL traffic from 10.1.0.0/16 to not be NAT'ed, no matter where its going.

your static NAT entry will only cause 10.1.0.0/16 to not get NAT'ed if it's going to the dmz interface, otherwise it is subject to other nat (inside) rules.

topic NAT exempt in Network Security

NAT exempt

Re: NAT exempt