3 Replies Latest reply on Feb 20, 2013 8:13 AM by noor
      • Re: Can you nat without the firewall on?
        levi Employee

        travisrigby:

         

        Thank you for asking this question.  You must have the the ip firewall enabled, as well as policy-classes created, and access-control lists (ACLs) to match traffic to be NAT'ed.  Additional information about the firewall and setting up NAT can be found in the IPv4 Firewall Protection in AOS, Configuring T1 Internet Access in AOS, and the video Configuring Internet Access (Many to one NAT) with the Firewall Wizard in AOS.

         

        Here is an example NAT configuration:

         

        ip firewall

        !

        interface eth 0/1

          ip address 192.168.1.1 255.255.255.0

          access-policy Private

          no shutdown

        !

        interface ppp 1

          ip address 65.162.109.202 255.255.255.252

          access-policy Public

          no shutdown

          cross-connect 1 t1 1/1 1 ppp 1

        !

        ip access-list standard wizard-ics

          remark Internet Connection Sharing

          permit any

         

        ip policy-class Private

          nat source list wizard-ics interface ppp 1 overload

        !

        ip policy-class Public

          ! Implicit discard


        Please review the documents above, and let me know if you have any question.


        Levi

        • Re: Can you nat without the firewall on?
          levi Employee

          travisrigby:

           

          I have marked this post as "assumed answered," but do not hesitate to reply to this thread if you have further questions on this topic.  I will be happy to help.

           

          Levi

            • Re: Can you nat without the firewall on?
              Employee

              I went ahead and flagged the "Correct Answer" on this post to make it more visible and help other members of the community find solutions more easily. If you don't feel like the answer I marked was correct, feel free to come back to this post and unmark it and select another in its place with the applicable buttons.  If you still need assistance, we would be more than happy to continue working with you on this - just let us know in a reply.

               

              Thanks,

              Noor