dynamic translation to pool error

opnineopnine — Tue, 12 Mar 2019 05:18:42 GMT

Hi all,

I have an asa 8.2 with 2 interface inside and outisde.

Ip source 192.168.50.5

Ip destination 192.168.100.125

Port 25

When I do a packt trace.

packet-tracer input inside tcp 192.168.100.125 smtp 192.168.50.5 smtp

Phase: 1
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found no matching flow, creating a new flow

Phase: 2
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 192.168.50.0 255.255.255.0 inside

Phase: 3
Type: ACCESS-LIST
Subtype: log
Result: ALLOW
Config:
access-group inside_access_in in interface inside
access-list inside_access_in extended permit ip object-group No_Restricted any
object-group network No_Restricted
network-object

Phase: 1
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found no matching flow, creating a new flow

Phase: 2
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 192.168.50.0 255.255.255.0 inside

Additional Information:

Phase: 4
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:

Phase: 5
Type: INSPECT
Subtype: inspect-smtp
Result: ALLOW
Config:
class-map inspection_default
match default-inspection-traffic
policy-map global_policy
class inspection_default
inspect esmtp _default_esmtp_map
service-policy global_policy global
Additional Information:

Phase: 6
Type: NAT
Subtype:
Result: DROP
Config:
nat (inside) 1 access-list inside_nat_outbound
match ip inside 192.168.100.0 255.255.255.0 inside any
dynamic translation to pool 1 (No matching global)
translate_hits = 371572, untranslate_hits = 0
Additional Information:

I added a static (inside,inside) 192.168.100.125 192.168.100.125 , but still the same issue.

Any ideas.

Saludos

Hi,ASA Inside Interface:- 192

Vibhor Amrodia — Thu, 08 Jan 2015 04:06:15 GMT

Hi,

ASA Inside Interface:- 192.168.50.0 255.255.255.0

ASA Outside Interface:- 192.168.100.0 255.255.255.0

You are running the packet incorrectly and it should be like this:-

packet-tracer input inside tcp 192.168.50.125 smtp 192.168.100.5 smtp

Also , please describe your requirement as well ?

Thanks and Regards,

Vibhor Amrodia

Vibhor, The 2 ip address are

opnineopnine — Thu, 08 Jan 2015 11:24:41 GMT

Vibhor,

The 2 ip address are from the Inside. and I run the pack-trace both ways and still have the same issue.

Regards

Hi,Please share the

Vibhor Amrodia — Fri, 09 Jan 2015 09:11:24 GMT

Hi,

Please share the configuration if required in a sanitized manner.