Re: ASA Nat problem

I bet I am missing this...

nat (DMZ2) 0 access-list NO-NAT

Is that it?

On Wed, Sep 21, 2011 at 9:35 PM, Ryan West <rwest_at_zyedge.com> wrote:

> On Wed, Sep 21, 2011 at 21:10:55, Christopher Copley wrote:
> > Subject: ASA Nat problem
> > global (OUTSIDE) 1 interface
> > nat (DMZ1) 0 access-list NO-NAT
>
> Think about what you might be missing here.
>
> > nat (DMZ1) 1 0.0.0.0 0.0.0.0
> > nat (DMZ2) 1 0.0.0.0 0.0.0.0
> >
> >
> > access-list VPNSITE1 extended permit ip object-group DMZ1-NET object-
> > group
> > VPN-SITE1
> > access-list VPNSITE2 extended permit ip object-group DMZ2-NET object-
> > group
> > VPN-SITE2
> >
> > access-list NO-NAT extended permit ip object-group DMZ1-NET
> > object-group
> > VPN-SITE1
> > access-list NO-NAT extended permit ip object-group DMZ2-NET
> > object-group
> > VPN-SITE2
> >
>
> -ryan
>

-- 
Christopher D. Copley
copley.chris_at_gmail.com
Blogs and organic groups at http://www.ccie.net