Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We have a need to exclude NAT (Identity NAT?) some hosts and PAT everything else to the outside interface address across a S2S VPN tunnel. How do you do that?
I am doing an eval of 5.2, we currently have 4.2 running in our network.I followed the user guide to set up a shell profile for priviledged exec mode. Set both the default and miximum priviledge to static 15. When I login to a network device, get t...
I am trying to configure ACS 5.2 to do all authentication against Microsoft AD, but use local identity groups to determine TACACS+ authorization. Anybody ever accomplished that?
Karsten,How is this an example of PAT? This is from the document:Topology:192.168.1.x/24 inside(ASA1)outside ===VPN===outside(ASA2)inside 192.168.2.0/24If you were configuring ASA1 nat exemption for this L2L tunnel, it would look like this:object n...
Karsten,Thanks. I am using 8.3+ and already figured out the NAT Exemption part. I need that for some hosts, not entire networks as shown in the document. What it does not show is how to NAT Exempt some hosts, and PAT all the remaining traffic.Kevi...