NAT, random source address

Mikael Gustafsson — Mon, 11 Mar 2019 23:26:53 GMT

Hi,

I have a problem with random host's geting the wrong source address on a ASA 5512-X 8.6(1).

Right now there is a host, 192.168.25.108, showing up with 6.6.6.6 (fake) on whatsmyip.org, should be 5.5.5.5 like the rest of 192.168.25.0/24.

In the xlate tabel I cant find anything wrong.

Same yesterday with two host, that are using the right NAT address today.

Anyone know what to look for here? Bug?

—--

object network N-192.168.25.0_24

nat (any,outside) dynamic interface. (5.5.5.5)

object network H-192.168.25.10

nat (inside,outside) static H-6.6.6.6X

NAT from inside:192.168.25.10 to outside:6.6.6.6

flags s idle 0:00:00 timeout 0:00:00

TCP PAT from any:192.168.25.108/49460 to outside:5.5.5.5/57990

flags ri idle 5:51:34 timeout 0:00:30

TCP PAT from any:192.168.25.108/49325 to outside:5.5.5.5/43044

flags ri idle 5:56:21 timeout 0:00:30

TCP PAT from any:192.168.25.108/49193 to outside:5.5.5.5/55640

flags ri idle 5:58:22 timeout 0:00:30

Regards

Mikael

Sent from Cisco Technical Support iPad App

Jennifer Halim — Thu, 05 Jul 2012 14:58:50 GMT

Have you clear the xlate after adding the static NAT statement?

"clear xlate"

topic NAT, random source address in Network Security