Nat Examples - Cisco 7604 Configuration Manual

Catalyst 6500 series switch and cisco 7600 series router firewall services module configuration guide using the cli

Hide thumbs Also See for 7604:

Table of Contents

Configuring NAT

By default, this command exempts traffic from inside to outside. If you want traffic from outside to

inside to bypass NAT, then add an additional nat command and enter outside to identify the NAT

instance as outside NAT. You might want to use outside NAT exemption if you configure dynamic NAT

for the outside interface and want to exempt other traffic.

For example, to exempt an inside network when accessing any destination address, enter the following

hostname(config)# access-list EXEMPT permit ip 10.1.2.0 255.255.255.0 any

hostname(config)# nat (inside) 0 access-list EXEMPT

To use dynamic outside NAT for a DMZ network, and exempt another DMZ network, enter the following

hostname(config)# nat (dmz) 1 10.1.2.0 255.255.255.0 outside dns

hostname(config)# global (inside) 1 10.1.1.45

hostname(config)# access-list EXEMPT permit ip 10.1.3.0 255.255.255.0 any

hostname(config)# nat (dmz) 0 access-list EXEMPT

To exempt an inside address when accessing two different destination addresses, enter the following

hostname(config)# access-list NET1 permit ip 10.1.2.0 255.255.255.0 209.165.201.0

255.255.255.224

hostname(config)# access-list NET1 permit ip 10.1.2.0 255.255.255.0 209.165.200.224

255.255.255.224

hostname(config)# nat (inside) 0 access-list NET1

NAT Examples

This section describes typical scenarios that use NAT solutions, and it includes the following topics:

Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM

"Configuring Dynamic NAT or PAT" section on page 16-26

Overlapping Networks, page 16-38

Redirecting Ports, page 16-39

NAT Examples

for information about the other

Show Quick Links

Table of Contents