# NAT Exclude VPN traffic

**URL:** <https://forum.networklessons.com/t/nat-exclude-vpn-traffic/591>\
**Category:** Network Services\
**Created:** [January 24, 2016, 8:44pm UTC](https://forum.networklessons.com/t/nat-exclude-vpn-traffic/591 "2016-01-24T20:44:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ramy\_ramy1033](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/r/ba9def/32.png) [@ramy\_ramy1033](https://forum.networklessons.com/u/ramy_ramy1033)\
**Post date:** [January 24, 2016, 8:44pm UTC](https://forum.networklessons.com/t/nat-exclude-vpn-traffic/591/1 "2016-01-24T20:44:53Z")

</div>

how to configure this option

When your router is also configured for NAT, don’t forget to configure your access-list so your VPN traffic is not translated when it leaves the router.

---

<div class="post-metadata">

**Author:** ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)\
**Post date:** [January 25, 2016, 8:08pm UTC](https://forum.networklessons.com/t/nat-exclude-vpn-traffic/591/2 "2016-01-25T20:08:17Z")

</div>

Hi Ramy,

You can do this within the access-list. You already have an access-list that defines what traffic should be translated with NAT. In this access-list, you should start with a deny statement so certain traffic doesn’t get translated.

Rene