RE: ASA Nat problem

On Wed, Sep 21, 2011 at 21:10:55, Christopher Copley wrote:
> Subject: ASA Nat problem
> global (OUTSIDE) 1 interface
> nat (DMZ1) 0 access-list NO-NAT

Think about what you might be missing here.

> nat (DMZ1) 1 0.0.0.0 0.0.0.0
> nat (DMZ2) 1 0.0.0.0 0.0.0.0
>
>
> access-list VPNSITE1 extended permit ip object-group DMZ1-NET object-
> group
> VPN-SITE1
> access-list VPNSITE2 extended permit ip object-group DMZ2-NET object-
> group
> VPN-SITE2
>
> access-list NO-NAT extended permit ip object-group DMZ1-NET
> object-group
> VPN-SITE1
> access-list NO-NAT extended permit ip object-group DMZ2-NET
> object-group
> VPN-SITE2
>

-ryan

Blogs and organic groups at http://www.ccie.net
Received on Thu Sep 22 2011 - 01:35:44 ART