Hi !

concerning access lists with nat !
is there any problem combining access-lists with PAT ?

i configured PAT on the serial external interface and an outgoing
access-list
on the ethernet interface ( where our customer connects his equipement  -
using 192.168.4.x addresses ) - on static mapping
for his exchange server !

outgoing packets are translated and send out but response packets are
dropped - though i configured
tcp established - 
could this be any problem, configuring the access-list after doing network
address translation . ? :


ip nat pool inside source list 1 interface serial 0/0:0 netmask
255.255.255.248 overload 
ip nat inside source static 192.168.4.2 x.x.x.100


access-list 1 permit 192.168.4.0 0.0.0.255
access-list 100 permit ip host 195.x.x.x.x host 192.168.4.2
access-list 100 permit ip host 195.x.x.x host 192.168.4.2
access-list 100 permit tcp any any established

thanx in advance

hans

_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to