NAT 0 questions

[winnkid]

Hi,

When doing NAT 0 with an ACL, can that be used to allow and disallow traffic like other ACLs?

We need to pass two public networks through the Pix for DSL customers. I need to be able to limit ICMP and other traffic to those networks.

Any ideas would be helpful.

Thanks

Brian

 

[tbissett]

The NAT 0 only turns MAT on and off. So, if for example, you put in a "deny icmp" in your NAT 0, it would be the equivalent of saying "Don't use NAT for this traffic unless it is ICMP." Normal access-lists on the interface do the allowing/disallowing.

 

[winnkid]

Thanks,

So if I understand this correctly, I apply an ACL just like always that will work on the NAT 0 traffic like any other traffic.

Is that correct?

Thanks,

Brian