Access-List PDM Error

[mknoxwfc]

I'm getting an error from the PDM upon load.

"PDM does not support multiple uses of a given access control list"

This is the ACL config

access-list 101 permit ip host 12.17.125.12 host 194.117.106.129 (for a VPN to VPN Connection)

access-list 101 permit ip any 10.201.1.0 255.255.255.0 (For outside VPN users to access inside IP's)

nat (inside) 0 access-list 101

What do I need to change to get this right.

Thanks

Michael

 

[yizhar]

HI.

You have not posted here the whole relevant config, but I understand that the 101 ACL is bound in 2 places - the NAT 0 and *ALSO* bound to the inside interface, like

nat (inside) 0 access-list 101
...
access-group 101 in interface inside

To solve this, you can create a duplicated access-list and bound one ACL to "nat 0" and the other to the interface.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar