topic Re: STATIC NAT TO OUTSIDE INTERFACE NOT WORKING in Network Security

STATIC NAT TO OUTSIDE INTERFACE NOT WORKING

denilson.mota — Wed, 27 Nov 2019 07:15:57 GMT

Hello experts,

I have a static NAT for my ASA outside interface, it was working before but suddenly stop work, I did packet tracer and the result is allowed, in the ASA access-list i do have many hits. When I do traceroute from the client pc the traffic stop on my ASA. The client can't browse to internet.

nat (Customs,Outside) source static RemoteGroup_Internet-Access interface

RemoteGroup_Internet-Access, this is an object-group and have tree hosts inside.

Attached the NAT I have in the ASA.

Any idea please.

Re: STATIC NAT TO OUTSIDE INTERFACE NOT WORKING

royarpit — Wed, 27 Nov 2019 13:35:23 GMT

Hi Denilson,

Could you provide the following details?

Output of "show tech"
Source IP address:
Mapped IP address:

Let me know if you need my help in real time troubleshooting over WebEx.

Regards,

Arpit Roy

Cisco TAC | Security

Re: STATIC NAT TO OUTSIDE INTERFACE NOT WORKING

denilson.mota — Wed, 27 Nov 2019 13:42:30 GMT

Hi Royarpit,

Thank you for your replay, and Yes I accept your help in real time. I am available now for WebEx.

Re: STATIC NAT TO OUTSIDE INTERFACE NOT WORKING

denilson.mota — Fri, 29 Nov 2019 09:28:33 GMT

Hello Experts,

I am still facing the problem, please help understanding the pcap I have attached. The result of packet tracer is allowed from host 172.189.10.11 to google.com. I have the acl permited host 172.189.10.11 to any IP and I have many hits. I have NAT from the same host to Outside interface. It works before but suddenly stop working. Any one can help please.

Thank you,