I have heard from one source that "deny" rules are not allowed in a NAT access-list. Could someone please point me to a Cisco reference for this? Thanks in advance. I'm running 6.3.3 on this pix, 515e.
Tom
Pix NAT Access-List question.
Oct 09, 2006
2 Replies
formatting link
In the first Syntax Description sub-box, the one for "access-list", it says,
You can only include permit statements in the access-list
with policy nat you can't have deny: The following configuration limitations apply to policy NAT:
?Access lists must contain permit statements only. Access lists for policy NAT cannot contain deny statements.
formatting link
M
Join the Discussion
Have something to add? Share your thoughts — no account required.
Didn't find your answer?
Ask the community — no account required