NAT overlap - Section 1, rule 0?

Jason M — Tue, 12 Mar 2019 06:04:46 GMT

I'm trying to set a NAT rule to allow traffic from ports 20000-21000 to a server on the Inside. When I apply the changes in ASDM I receive this warning:

[WARNING] nat (Inside,Outside) after-auto 1 source static [host object] interface service PASV-NAT PASV-NAT mapped-address [WAN IP]/20000-21000 overlaps with existing static NAT in Section 1, rule 0.

I gather that something in the port range 20000-21000 is in another NAT rule (though I know none of the ones I've created are in this range), but I can't find a rule that conflicts. I checked both in ASDM and reading through the config and I can't figure out what rule it considers to be "rule 0".

Does anyone know what "Section 1, rule 0" really refers to?

Thanks

Hi,I think there is a

Vibhor Amrodia — Wed, 10 Jun 2015 09:15:12 GMT

Hi,

I think there is a overlapping statement in the Manual NAT section throwing this error.

I think it should be a dynamic NAT statement.

Can you share the NAT configuration from the ASA device ?

Thanks and Regards,

Vibhor Amrodia

topic Hi,I think there is a in Network Security

NAT overlap - Section 1, rule 0?

Hi,I think there is a