Hi.<br><br>I've used this:<br><br> ip nat pool pool192 napt multibind<br> address 80.76.188.251 to 80.76.188.251<br>!<br> nat policy office<br>! Default class<br> ignore<br>! Named classes<br> access-group for_nat<br>
class NAT<br> pool pool192 office<br><br> policy access-list for_nat<br> seq 3 permit ip 192.168.188.0 0.0.0.255 80.76.188.0 0.0.0.255 class NONAT<br> seq 4 permit ip 192.168.188.0 0.0.0.255 192.168.0.0 0.0.255.255 class NONAT<br>
seq 10 permit ip 192.168.188.0 0.0.0.255 any class NAT<br><br><br>Try to use this policy ACL:<br><br> policy access-list for_nat<br>
seq 3 permit ip 10.0.0.0 0.0.0.255 20.0.0.0 0.0.0.255 class NONAT<br> seq 10 permit ip 10.0.0.0 0.0.0.255 any any class NAT<br>
<br><br>WBR, Ilya Savin.<br><br><div class="gmail_quote">2010/8/4 Vladislav Vasilev <span dir="ltr"><<a href="mailto:vvasilev@vvasilev.net">vvasilev@vvasilev.net</a>></span><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hello!<br>
<br>
I couldn't find a way to configure the following NAT scenario:<br>
<br>
1. NO-NAT 10.0.0.0 0.0.0.255 20.0.0.0 0.0.0.255<br>
2. NAT 10.0.0.0 0.0.0.255 any<br>
<br>
I thought I would just add a deny statement for 1 before the permit<br>
statement for 2 in the policy access-list but this is not possible.<br>
<br>
Then I tried to go the opposite way:<br>
<br>
nat policy NAT_POLICY<br>
! Default class<br>
pool NAT_POOL INTERNET<br>
! Named classes<br>
access-group NO-NAT<br>
class NO-NAT<br>
ignore<br>
<br>
But then I am not able to define a policy access list for the default class.<br>
<br>
Any ideas?<br>
<br>
Thank you!<br>
<br>
<br>
Regards,<br>
V.Vasilev<br>
_______________________________________________<br>
redback-nsp mailing list<br>
<a href="mailto:redback-nsp@puck.nether.net">redback-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br>
</blockquote></div><br>