|
Posted by Guyster on October 15, 2007, 12:06 pm
If you were Registered and logged in, you could reply and use other advanced thread options > Guyster wrote:
> > I don't have it to hand right now as I have left the site - I am due
> > back for a couple of days but I will try and get hold of it in the
> > meantime. I took a look on Cisco's site this afternoon and found the
> > following in the section on policy NAT:
>
> > Note: All types of NAT support policy NAT except for NAT exemption
> > (nat 0 access-list). NAT exemption uses an access control list in
> > order to identify the local addresses, but differs from policy NAT in
> > that the ports are not considered.
>
> > Have you had Policy NAT running with NAT exemption before, I am trying
> > to policy NAT POP3 traffic to an external address to be routed
> > straight out and leave all other traffic passed through the PIX using
> > its internal address - do you think this should work?
>
> Yes I did. Hint - it doesn't have to be the same NAT ;-)
>
> nat (nameif) 0 access-list
> nat (nameif) 1 <your policy-NAT for POP3>
> global (nameif) 1 <external IP for policy-NAT>
>
> Make sure that destination in NAT exemption ACL does not overlap with
> policy-NAT. In other words - "any" in both is bad idea.
>
> Regards,
> Andrey.
Thanks very much for that - I will give it another go, I was begining
to think it was a non starter. If I cant get it working I will post
the config later.
Cheers
Guy
| 
Yahoo! 
Google 
Windows Live 
del.icio.us 
digg 
Netscape 
XML site map