ASA5505 - NAT Command Error (Packet Tracer)

VjXj27613 — Sat, 29 Jun 2019 19:46:59 GMT

Hi,

I'm following a Cisco tutorial for configuring an ASA5505 with a DMZ. Link to the tutorial below:

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/115904-asa-config-dmz-00.html

I've set it up and getting to Step 2 'Step 2 - Configure NAT to Access the Web Server from the Internet' I input the command:

 nat (dmz,outside) static webserver-external-ip service tcp www www

and it throws an error:

ciscoasa(config-network-object)#nat (dmz,outside) static webserver-external-ip service tcp www www
                                                              ^
% Invalid input detected at '^' marker.

I just can't work out what I'm doing wrong. I've follow the tutorial (only changing IP addresses slightly).

I'm running it on Packet Tracer 7.2.1.

With ASA 5505 - Cisco Adaptive Security Appliance Software Version 8.4(2)

If anyone is able to help that would be really appreciated.

Thanks

Re: ASA5505 - NAT Command Error (Packet Tracer)

JORGE RODRIGUEZ — Sun, 30 Jun 2019 02:21:42 GMT

You are missing the <source> statement

e.g

 nat (dmz,outside) source static webserver-external-ip service tcp www www

Try the above and see how that works

you can always place a question mark to provide addition options

(config)# nat (dmz,outside) ?

<1-2147483647> Position of NAT rule within before auto section
after-auto Insert NAT rule after auto section
source Source NAT parameters

topic Re: ASA5505 - NAT Command Error (Packet Tracer) in Network Security

ASA5505 - NAT Command Error (Packet Tracer)

Re: ASA5505 - NAT Command Error (Packet Tracer)