[nsp] IP NAT question

Stephen J. Wilcox steve at telecomplete.co.uk
Tue Jun 8 16:06:29 EDT 2004


Hi Eric,
 if its just one host match this host only in an acl 

access-l 10 perm 192.168.110.2
ip nat inside source list 10 int ser0

if its more complicated do it with a route-map instead and use an extended acl 
to match src/dst

ip nat inside source route-map ....

Steve

On Tue, 8 Jun 2004, Eric Helm wrote:

> I have an odd situation that requires an inside host (192.168.110.2) on 
> the Ethernet0 port be NATed to a public address on Ethernet1 port for 
> internet access, but no NAT for other specific networks that reside on 
> the E1 side of the router. Any good suggestions on how to accomplish this?
> 
> NAT to the internet is easy enough, but how do I prevent the host from 
> being NATed if the source or destination is one of the networks I 
> specify on the E1 side?
> 
> Thanks,
> /Eric
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 



More information about the cisco-nsp mailing list