ASA problem - I cannot nat from hub router to outside interface

BC83676 — Mon, 27 Jul 2020 12:28:45 GMT

Hello,

I am having problems nating from DMVPN HUb router to outside interface.

Topology = (router -> outside switch -> ASA FW 9.x version)

I have been following the document https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/Sep2017/CVD-IWANDeployment-SEP17.pdf however, i got stcuk on procedure 3 (Configure network address translation).

After configuration on asdm when trying to apply I have the following error:

[ok] object network dmz
object network dmz
[ok] host 192.168.1.1
[ERROR] nat stactic outside net-to-net
Address 172.168.1.1 overlaps with outside interface address.
ERROR: NAT Policy is not downloaded

Router can ping the Firewall, however it cannot ping internet (8.8.8.8).

Any

Re: ASA problem - I cannot nat from hub router to outside interface

BC83676 — Wed, 29 Jul 2020 14:19:42 GMT

After reviewing all the settings have concluded it was an ACL missing.

topic Re: ASA problem - I cannot nat from hub router to outside interface in Network Security

ASA problem - I cannot nat from hub router to outside interface

Re: ASA problem - I cannot nat from hub router to outside interface