Cisco ASA 5505 no nat

[andrey.v.tyurin]

Hi all!

Can I disable nat at all. I mean comand like this:

no nat (inside) 1 0.0.0.0 0.0.0.0

I want to use my device like router.

Does it work?

(I did access-lists and bind it to interfaces.)

[Jennifer Halim · Accepted solution]

Yes you can, and also you would need to disable "nat-control" with the command:

no nat-control

For the ASA to act like a router, please also configure the ASA interfaces in the same security level. If they have different security level, you would need to configure static 1:1 NAT to itself to not NAT the traffic.

Then also configure:

same-security permit inter-interface

[andrey.v.tyurin]

Hi, Jennifer.

I emulate this situation on the GNS, and if I do

no nat (inside) 1 0.0.0.0 0.0.0.0

and right access-list  comunication is work.

Do You mean that it is not working at a real device?

[Jennifer Halim · Accepted solution]

"nat-control" by default is disabled on the real ASA. So depends on whether you have that enabled before, you might need to disable it.

Otherwise, yes, it will work on the real device too.