topic Attached configuration is not in Network Security

Static NAT ISSUE- Firewall IOS Version 9.6(2)

shishirhemant108 — Tue, 12 Mar 2019 09:16:38 GMT

Hello,

I am facing issue while configuring Static NAT with Object Group. When I am configuring Static NAT with Object Group( ACL is configured properly) it is not getting resolved but as I am creating an Object for same IP and then applying Static NAT (Without Object-Group Network command) for that it's work absolutely fine. Kindly let me know what is way to configure Static NAT with Object Group without using PAT.

Please paste the commands

Ajay Saini — Wed, 26 Apr 2017 13:44:23 GMT

Please paste the commands that you are trying to add and the requirement. That way, we can point out the mistake and would be easier.

-AJ

Hi,

shishirhemant108 — Thu, 27 Apr 2017 05:19:21 GMT

Hi,

Please find configuration below:

object-group network Private-IP
network-object host X.X.X.X

object-group network Public-IP
network-object A.B.C.D 255.255.255.255

object-group network Internet
network-object 0.0.0.0 0.0.0.0

object-group network Private-IP
nat (Ingress,egress) source static Private-IP Public-IP destination static Internet Internet no-proxy-arp

Firstly, if you want to add 0

Ajay Saini — Thu, 27 Apr 2017 12:27:58 GMT

Firstly, if you want to add 0.0.0.0 subnet/netmask, simply add any.

SOmething like

nat (Ingress,egress) source static Private-IP Public-IP destination static any any

also, the config you attached did work or not. And which is the other config which worked. Please clarify. Also, tell me how you are testing. Did you run a packet-tracer?

_
AJ

Attached configuration is not

shishirhemant108 — Thu, 27 Apr 2017 12:37:43 GMT

Attached configuration is not working.

When i am trying to check on ASDM packet tracer, I am getting NAT untranslated,

I dont see attached config,

Ajay Saini — Thu, 27 Apr 2017 12:54:28 GMT

I dont see attached config, could you please attach the config and the packet tracer output.