Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello, dear experts I have a little bit of an issue with cisco static pat. Basically i have some hosts on the remote network <site outside ip>, in the inside segment 10.0.0.0/8. Hosts need access to the internet and I need access to some ports from a...
Hello Cristian, I saw your post and greatly appreciate it. Now I understand that "reversible" was just useless in this particular case and may be omitted without consequences.The point is that with only NAT policing is is kinda hard for me to do:1) s...
Hello Cristian, Thank you for the input! Route-map was used in a bad way, cause no route policing is needed, that was a weak security enforcement attempt and I'm kinda ashamed of it, so i omitted it in the end.Your description of the "reversible keyw...
Hello Paul, First of all, many thanks for your time, your help is invaluable for my little task. I fixed the issue by removing "reversible" keyword and route-map, since it is useless for static translation in my case, because there is only 1:1 transl...
Does it mean that "reversible" is used only on dynamic pat to create static translation? That's good to know, i appreciate your effort. But in this particular case it means that this keyword is useless and can be omitted, because static rule does not...
Hello Paul, Thank you for your input! Hosts 10.0.1.3, 1.0.1.4, etc have to have internet access, so I can't exclude them from dynamic pat. extensible reversible is used for outside-to-inside initialization, so ports translated only when initiated fro...