topic First you need to clear the in Network Security

Cannot remove NAT statements

Furry411 — Tue, 12 Mar 2019 09:40:08 GMT

I am trying to clean up the NATing to setup a VPN, but the Nats are overwritting the no nat statements. I am trying to clean them to by adding the

source dynamic any interface. The firewall is wanting me to remove them, and I cannot find anything online that points me to the right direction. Any help would be appreciated.

nat (inside,outside) dynamic x.x.x.x

and

nat (Hostnet,outside) dynamic interface

every time i try to remove it i get this

no nat (inside,outside) dynamic x.x.x.x

ERROR: % Invalid input detected at '^' marker.

no nat (Hostnet,outside) dynamic interface

ERROR: % Invalid input detected at '^' marker.

Cheers

First you need to clear the

prashant dwivedi — Fri, 07 Jul 2017 05:40:09 GMT

First you need to clear the existing NAT entries associated with the configuration that you want to remove.

Clear Xlate < host/subnet>

I have cleared all the xlates

Furry411 — Fri, 07 Jul 2017 05:56:27 GMT

I have cleared all the xlates from the interface Hostnet, then shut down the interface and still it is not letting me delete the NAT statement.

should we try below ?

prashant dwivedi — Fri, 07 Jul 2017 07:20:54 GMT

should we try below ?

1- clear configuration NAT

2- remove the interface configuraiton

3- then remove the NAT config..

Hi Furry411@gmail.com,

Spooster IT Services — Fri, 07 Jul 2017 14:39:28 GMT

Hi Furry411@gmail.com,

These NAT entries are under object configuration. You cannot remove it from global mode. You need to go to object configuration mode first by issing the command:

object network <WORD>
no nat (inside,outside) dynamic x.x.x.x

object network <WORD>
no nat (Hostnet,outside) dynamic interface

Re: Cannot remove NAT statements

3656089 — Mon, 20 Apr 2020 18:50:05 GMT

for example,

object network obj-10.40.40.100
host 10.40.40.100
nat (inside,outside) static 30.30.30.30 dns

to remove the NAT entry,

object network obj-10.40.40.100
no nat (inside,outside) static 30.30.30.30 dns