12-20-2002 02:14 AM - edited 03-09-2019 01:28 AM
Is it possible to have 2 nat 0 entries for the same interface? For example:
nat (vpntest) 0 access-list 113
nat (vpntest) 0 access-list 115
Hope this is correct. If so, I've answered my two previous questions in regard to implementing 2 VPN's on the same PIX, which I'll share with everyone.
Tai
12-20-2002 06:11 AM
Hi,
the second nat command will overwrite the first one.
Isn't it possible to combine the statements in both ACLs into one single ACL?
Kind Regards,
Tom
12-20-2002 06:44 AM
Thanks, I found that out first hand. I knew it sounded too good to be true!
I simply made an ACL for 117, which included both 113 & 115. I then did:
nat (vpntest) 0 access-list 117
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide