[c-nsp] Don't NAT a Subset of Traffic

Octavio Alvarez alvarezp at alvarezp.ods.org
Sun Aug 22 06:08:32 EDT 2010


On Sun, 22 Aug 2010 02:29:28 -0700, Sridhar Ayengar <ploopster at gmail.com>  
wrote:
>
> I have a Verizon FiOS connection with 5 IP addresses attached to my 7505.
>
> So because it's excluded from the access-list, traffic from my private  
> network 172.16.16.0 to my public IP addresses is not NATed.  I still  
> can't figure out how to pass this traffic without NATing it.  If I  
> remove the deny line from the access-list, the traffic is correctly  
> passed NATed.  Anyone have any ideas for me?

I would go for: it is passing but you don't have return routes on your
external hosts.

Octavio.


More information about the cisco-nsp mailing list