NAT Issue

tonysebastian — Tue, 12 Mar 2019 08:53:56 GMT

Dear All

I have configured two static NAT rules on ASA which is running 9.1 OS version.

`configuration is like

Ist Nat rule

Real IP 10.50.1.16 Mapped IP 192.168.200.1 with source port 80 and destination port 80

Second Nat Rule

Real IP 10.50.1.16 Mapped IP 192.168.200.1 with source port 83 and destination port 83

And all nat rules are object nat.

first Nat rule is working but second is not working. I have attached the logs also.

Recommended Action is :

When not on the same interface as the host using NAT, use the mapped address instead of the actual address to connect to the host. In addition, enable the inspect command if the application embeds the IP address.

Could any can help me to sort out this issue.

Regards

Tony

Hi

Francesco Molino — Wed, 08 Feb 2017 14:18:09 GMT

In 1 case, it seems that you're missing a statement in your outside acl and the other shows up an asymmetric routing issue.

Could you drop a txt file with your config? and also output of packet-tracer command?

Thanks

PS: Please don't forget to rate and mark as correct answer if this answered your question

topic NAT Issue in Network Security

NAT Issue

Hi