access-list with PAT

[akin.oyelakin]

Hi guys,

I will like to know if on the accesslist with PAT, you can have deny statements. i.e deny statement as part of the access-list for traffic you don't want to be PATed.

example:

access-list acl-pat deny ip 10.0.0.1 0.0.0.0 any

access-list acl-pat permit ip 10.0.0.0 0.0.0.255 any

if i don't want 10.0.0.1 to be PATed.

[pkhatri · Accepted solution]

Hi,

That is perfectly legal and quite a common practice.

Hope that helps - pls rate the post if it does.

Paresh

[akin.oyelakin]

Thanks so much it did help