03-04-2024 12:01 PM
Hi Team,
Please can confirm what the below config is try to achieve?
Is it doing a PAT to the outside interface then allowing 10.0.255.0 coming from the outside interface to access anything?
access-list outside extended permit ip 10.0.255.0 255.255.255.240 any
global (outside) 1 interface
access-group outside in interface outside
03-04-2024 12:18 PM
for ACL it OK
for NAT you need
NAT (Inside) 1 subnet
MHM
03-04-2024 12:46 PM
what are the commands below doing is it not some sort of NAT?
global (outside) 1 interface
access-group outside in interface outside
03-04-2024 12:49 PM
For Access from Out
access-list outside extended permit ip 10.0.255.0 255.255.255.240 any
!
access-group outside in interface outside
For NAT (overload)
global (outside) 1 interface
NAT (Inside) 1 <subnet connect to Inside>
MHM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide