- A virtual community of network engineers
 Home  BookStore  StudyNotes  Links  Archives  StudyRooms  HelpWanted  Discounts  Login
RE: Necessity of Static Commands in PIX Config [7:98221] posted 04/04/2005
[Chronological Index] [Thread Index] [Top] [Date Prev][Date Next] [Thread Prev][Thread Next]

Quoting David Mitchell :

> Thank you all for your excellent responses!
> I still have one grey area though - the "directional" nature of nonat.
> Take the following as an example:
> Nat (inside) 0 access-list no-nat
> Access-list no-nat permit ip any
> I understand that this will cause any inside traffic destined to
> 10.20.x.x to NOT be translated - and just use it's native addresses.


> However, what about traffic initiating from outside (10.20.x.x) trying
> to get back in? 

No transaltion will occur for the return traffic, or traffic originated from
outside, UNLESS you enable bi-directional NAT* (Aka Outside NAT, aka

See here for more details!


Message Posted at:
FAQ, list archives, and subscription info: