<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic single server Nat failure - was working in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/single-server-nat-failure-was-working/m-p/2186209#M360453</link>
    <description>&lt;P&gt;I am not getting through to a server, although other configured servers are working fine. I tried a packet tracer and when clicking on the "Show Nat rule" that is denying, I get: &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;ASDM is not able to select the entry for the following configuration -&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;nat (inside) 0 0.0.0.0 0.0.0.0&lt;/P&gt;&lt;P&gt;nat-control&lt;/P&gt;&lt;P&gt;match ip inside any outside any&lt;/P&gt;&lt;P&gt;no translation group, implicit deny&lt;/P&gt;&lt;P&gt;policy_hits = 2&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I saw some other discussions concerning DMZ but did not want to use the suggested commands for fear of making the problem worse. Any advise would be appreciated!&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Result of the command: "sh nat"&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;NAT policies on Interface inside:&lt;/P&gt;&lt;P&gt;&amp;nbsp; match ip inside host Tweak outside any&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; static translation to MainComcastOutside&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; translate_hits = 3, untranslate_hits = 91&lt;/P&gt;&lt;P&gt;&amp;nbsp; match ip inside host TowelieInside outside any&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; static translation to TowelieOutside&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; translate_hits = 117, untranslate_hits = 0&lt;/P&gt;&lt;P&gt;&amp;nbsp; match ip inside 128.0.0.0 255.255.0.0 inside any&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; dynamic translation to pool 1 (No matching global)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; translate_hits = 15, untranslate_hits = 0&lt;/P&gt;&lt;P&gt;&amp;nbsp; match ip inside 128.0.0.0 255.255.0.0 outside any&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; dynamic translation to pool 1 (23.25.43.61 [Interface PAT])&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; translate_hits = 8520, untranslate_hits = 1288&lt;/P&gt;&lt;P&gt;&amp;nbsp; match ip inside 128.0.0.0 255.255.0.0 _internal_loopback any&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; dynamic translation to pool 1 (No matching global)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; translate_hits = 0, untranslate_hits = 0&lt;/P&gt;&lt;P&gt;&amp;nbsp; match ip inside any outside any&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; no translation group, implicit deny&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; policy_hits = 2&lt;/P&gt;</description>
    <pubDate>Tue, 12 Mar 2019 01:12:30 GMT</pubDate>
    <dc:creator>jabberwok_e</dc:creator>
    <dc:date>2019-03-12T01:12:30Z</dc:date>
    <item>
      <title>single server Nat failure - was working</title>
      <link>https://community.cisco.com/t5/network-security/single-server-nat-failure-was-working/m-p/2186209#M360453</link>
      <description>&lt;P&gt;I am not getting through to a server, although other configured servers are working fine. I tried a packet tracer and when clicking on the "Show Nat rule" that is denying, I get: &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;ASDM is not able to select the entry for the following configuration -&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;nat (inside) 0 0.0.0.0 0.0.0.0&lt;/P&gt;&lt;P&gt;nat-control&lt;/P&gt;&lt;P&gt;match ip inside any outside any&lt;/P&gt;&lt;P&gt;no translation group, implicit deny&lt;/P&gt;&lt;P&gt;policy_hits = 2&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I saw some other discussions concerning DMZ but did not want to use the suggested commands for fear of making the problem worse. Any advise would be appreciated!&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Result of the command: "sh nat"&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;NAT policies on Interface inside:&lt;/P&gt;&lt;P&gt;&amp;nbsp; match ip inside host Tweak outside any&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; static translation to MainComcastOutside&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; translate_hits = 3, untranslate_hits = 91&lt;/P&gt;&lt;P&gt;&amp;nbsp; match ip inside host TowelieInside outside any&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; static translation to TowelieOutside&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; translate_hits = 117, untranslate_hits = 0&lt;/P&gt;&lt;P&gt;&amp;nbsp; match ip inside 128.0.0.0 255.255.0.0 inside any&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; dynamic translation to pool 1 (No matching global)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; translate_hits = 15, untranslate_hits = 0&lt;/P&gt;&lt;P&gt;&amp;nbsp; match ip inside 128.0.0.0 255.255.0.0 outside any&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; dynamic translation to pool 1 (23.25.43.61 [Interface PAT])&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; translate_hits = 8520, untranslate_hits = 1288&lt;/P&gt;&lt;P&gt;&amp;nbsp; match ip inside 128.0.0.0 255.255.0.0 _internal_loopback any&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; dynamic translation to pool 1 (No matching global)&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; translate_hits = 0, untranslate_hits = 0&lt;/P&gt;&lt;P&gt;&amp;nbsp; match ip inside any outside any&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; no translation group, implicit deny&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; policy_hits = 2&lt;/P&gt;</description>
      <pubDate>Tue, 12 Mar 2019 01:12:30 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/single-server-nat-failure-was-working/m-p/2186209#M360453</guid>
      <dc:creator>jabberwok_e</dc:creator>
      <dc:date>2019-03-12T01:12:30Z</dc:date>
    </item>
    <item>
      <title>single server Nat failure - was working</title>
      <link>https://community.cisco.com/t5/network-security/single-server-nat-failure-was-working/m-p/2186210#M360456</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Can you share the nat configuration from the unit? &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Also, can you specify how this server is going to be access and by whom?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This command:&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;nat (inside) 0 0.0.0.0 0.0.0.0&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;basically says that IP addresses on the packets coming from the inside will not be translated. Is that what you want to do?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Mon, 11 Mar 2013 17:01:24 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/single-server-nat-failure-was-working/m-p/2186210#M360456</guid>
      <dc:creator>jocamare</dc:creator>
      <dc:date>2013-03-11T17:01:24Z</dc:date>
    </item>
  </channel>
</rss>

