topic when i doing global NAT then show error message in Network Security

when i doing global NAT then show error message

SK Faisal — Wed, 13 Mar 2019 01:05:15 GMT

interface Ethernet0/0

security-level 0

nameif outside

ip address 200.200.200.1 255.255.255.252

exit

interface Ethernet0/1

security-level 100

nameif inside

ip address 192.168.1.1 255.255.255.0

nat (inside) 1 192.168.1.0 255.255.255.0

global (outside) 1 200.200.200.1

Error: 200.200.200.1-200.200.200.1 overlaps with outside interface address

route outside 0.0.0.0 0.0.0.0 200.200.200.2 1

dhcpd ping_timeout 3000

dhcpd address 192.168.1.2-192.168.1.254 inside

dhcpd enable inside

threat-detection basic-threat

when i doing global NAT then show error message

Jouni Forss — Tue, 11 Jun 2013 06:28:52 GMT

Hi,

When you use the "outside" interface IP address on the Dynamic PAT configuration with the "global" command then you use the keyword "interface" instead

For example

global (outside) 1 interface

It will then use the IP address you mention.

Hope this helps

Please remember to mark the reply as the correct answer if it answered your question.

Ask more if needed

- Jouni

when i doing global NAT then show error message

SK Faisal — Tue, 11 Jun 2013 06:35:53 GMT

global (outside) 1 interface

global for this range already exists

when i doing global NAT then show error message

Jouni Forss — Tue, 11 Jun 2013 07:18:11 GMT

Hi,

Well then you already have some existing configuration using the interface IP address.

Can you share the output of

show run global

show run nat

- Jouni

when i doing global NAT then show error message

SK Faisal — Tue, 11 Jun 2013 10:35:24 GMT

ciscoasa(config)# sh run global

global (outside) 1 interface

ciscoasa(config)# sh run nat

nat (inside) 1 192.168.1.0 255.255.255.0

when i doing global NAT then show error message

cadet alain — Tue, 11 Jun 2013 10:46:44 GMT

Hi,

can you try clear configure nat and then renter the nat statements with the global one referencing the interface.

Regards

Alain

Don't forget to rate helpful posts.

when i doing global NAT then show error message

Jouni Forss — Tue, 11 Jun 2013 10:52:04 GMT

Hi,

You dont really have any need to add the configuration

global (outside) 1 200.200.200.1

Since you already have

global (outside) 1 interface

And they are the same

global (outside) 1 interface = global (outside) 200.200.200.1

I am not sure what you want to do here since you are trying to add a configuration command that you actually have already on the device.

If you want to add more source network under the same Dynamic PAT then you can use the format

nat () 1

Where you naturally replace the

= with the "nameif" of the interface where the source network resides
= with the source networks network address
= with the network mask of the source network being added

Hope this helps

If this hasnt already answered your question then please specify what you are trying to achieve exactly.

- Jouni