I would like to know if I can use multiple NAT 0 statements for the same interface e.g inside interface.
Presently I am already using a nat (inside) 0 statement with an access list. Now I want to implement a site to site vpn. So I want the new access-list also not to be natted for the vpn traffic.
You can have as many as you like. You can mix and match nat 0 access-list and nat 0 ip.address.block.here subnet.mask.goes.here style statements as well
nat 0 access-list is a true nat exemption, and is probably the best practice. Its probably cleanest to maintain one access-list for use for one nat 0 command statement
write a new accesslist that combines all of the entries you wish to have nat 0 apply to
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
