NAT configuration

Hello,
The deny rule in the ACL will directly discard packets. If you do not want to perform NAT for some addresses, you can configure two ACLs, one ACL permits the addresses that do not need NAT, and the other ACL is used for NAT.

The script is as follows:

acl number 3001
 rule 5 permit ip source 203.xx.xx.xx 0
 rule 10 permit ip source 203.xx.xx.yy 0
#
acl 3002
rule 5 permit ip source xx.xx.xx.xx xx
#
traffic classify NoNAT
  If match acl 3001
#
traffic classify NAT
  If match acl 3002
#
traffic behavior NoNAT
permit
#
traffic behavior NAT
  nat bind instance 3333
#
traffic policy NAT
Classify NoNAT behavior NoNAT
Classify NAT behavior NAT
#

interface GigabitEthernet1/0/1
 undo shutdown

 traffic-policy NAT outbound

#