[rbak-nsp] Policy NAT

[Vladislav Vasilev]

Hello!

I couldn't find a way to configure the following NAT scenario:

1. NO-NAT 10.0.0.0 0.0.0.255 20.0.0.0 0.0.0.255
2. NAT 10.0.0.0 0.0.0.255 any

I thought I would just add a deny statement for 1 before the permit
statement for 2 in the policy access-list but this is not possible.

Then I tried to go the opposite way:

nat policy NAT_POLICY
! Default class
  pool NAT_POOL INTERNET
! Named classes
  access-group NO-NAT
   class NO-NAT
   ignore

But then I am not able to define a policy access list for the default class.

Any ideas?

Thank you!


Regards,
V.Vasilev