topic NATting problem in Network Security

NATting problem

WStoffel1 — Tue, 12 Mar 2019 00:36:21 GMT

Hi all, got another natting problem (and ACL issue) I can't solve regarding an L2L tunnel. Attached is the config, and nat control is enabled, which is actually a first for me.

Issue: Tunnel to 192.168.193.0/24 comes up, showing it up at the bottom of the attached config. I need to be able to pass traffic from 3 local subnets defined as object-group network DM_INLINE_NETWORK_1 to the 192.168.193.0/24 and I'm unable to. Any ideas?

Thanks in advance.

NATting problem

julomban — Wed, 12 Dec 2012 14:24:38 GMT

Hello,

You are missing the the ACL on the NAT 0 rule:

nat (inside) 0 access-list 105

Please add the following ACL:

access-list 105 permit ip object-group DM_INLINE_NETWORK_1 192.168.193.0 255.255.255.0

You need to make sure the other site of the tunnel has already the same config otherwise will not work.

Regards,

Juan Lombana

Please rate helpful posts.

NATting problem

WStoffel1 — Wed, 12 Dec 2012 15:01:22 GMT

Fast response and you nailed it. Thank you! Traffic was flowing immediately.

Any particular reason it's permit IP and not Extended Permit like the rest of 105?

NATting problem

julomban — Wed, 12 Dec 2012 15:06:56 GMT

Hello,

I am glad to hear that. The "extended" line is implicit, if you look again at show access-list 105 you will see the last line with the extended as the rest. This is include it automatically into any ACL you created.

Regards,

Juan Lombana

NATting problem

WStoffel1 — Wed, 12 Dec 2012 15:18:53 GMT

Haha, 100% correct again, didn't realize that. Thank you!

NATting problem

julomban — Wed, 12 Dec 2012 15:37:28 GMT

Your welcome!! 🙂