cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
817
Views
2
Helpful
3
Replies

ASA Config

jay_7301
Level 1
Level 1

Hi Team,

Please can confirm what the below config is try to achieve?

Is it doing a PAT to the outside interface then allowing 10.0.255.0 coming from the outside interface to access anything? 

access-list outside extended permit ip 10.0.255.0 255.255.255.240 any
global (outside) 1 interface
access-group outside in interface outside

3 Replies 3

for ACL it OK 
for NAT you need 

NAT (Inside) 1 subnet 

MHM

jay_7301
Level 1
Level 1

what are the commands below doing is it not some sort of NAT?

global (outside) 1 interface
access-group outside in interface outside

For Access from Out

access-list outside extended permit ip 10.0.255.0 255.255.255.240 any
!
access-group outside in interface outside

For NAT (overload)

global (outside) 1 interface

NAT (Inside) 1 <subnet connect to Inside>

MHM