# ASA NAT/PAT (exemption)

**URL:** <https://forum.networklessons.com/t/asa-nat-pat-exemption/781>\
**Category:** ASA\
**Created:** [December 14, 2016, 3:51am UTC](https://forum.networklessons.com/t/asa-nat-pat-exemption/781 "2016-12-14T03:51:36Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![sims](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/s/c6cbf5/32.png) [@sims](https://forum.networklessons.com/u/sims)\
**Post date:** [December 14, 2016, 3:51am UTC](https://forum.networklessons.com/t/asa-nat-pat-exemption/781/1 "2016-12-14T03:51:36Z")

</div>

Hi,

Lets assume that I have another OUTSIDE zone and there is a gsm router (which is already doing nat ).So I dont’ want to NAT whatever going throuth this zone .

How can I do that

Thanks

---

<div class="post-metadata">

**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\
**Post date:** [December 14, 2016, 12:31pm UTC](https://forum.networklessons.com/t/asa-nat-pat-exemption/781/2 "2016-12-14T12:31:00Z")

</div>

@siraj.malayil It can be done like this:

```
nat (LOCAL_SUBNET,OUTSIDE) source static LOCAL_SUBNET LOCAL_SUBNET destination static REMOTE_SUBNET REMOTE_SUBNET

object network LOCAL_SUBNET
 subnet 192.168.1.0 255.255.255.0

object network REMOTE_SUBNET
 subnet 192.168.2.0 255.255.255.0 

```

This tells the ASA that traffic from the LOCAL\_SUBNET, going to the OUTSIDE should be translated “to itself”. In other words, don’t translate it. Same thing for the REMOTE\_SUBNET.

---

<div class="post-metadata">

**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\
**Post date:** [November 17, 2020, 11:44am UTC](https://forum.networklessons.com/t/asa-nat-pat-exemption/781/4 "2020-11-17T11:44:10Z")

</div>

For a complete example, take a look here:

> **[Cisco ASA NAT Exemption](https://networklessons.com/cisco/asa-firewall/cisco-asa-nat-exemption)**
>
> This lesson explains how to configure Cisco ASA NAT exemption. This is useful when you want to exclude traffic from being NAT translated.