Needs help on NAT

kope — Mon, 11 Mar 2019 22:17:13 GMT

global (outside) 2 interface

nat (inside) 2 access-list dmz

access-list dmz permit ip 21.21.0.0 255.255.0.0

nat (inside) 0 0.0.0.0 0.0.0.0

static(inside,outside) 3.3.3.0 3.3.3.0 netmask 255.255.255.0

static(inside,outside) 3.3.4.0 3.3.4.0 netmask 255.255.255.0

.......

The problem here is I am unable to translate the 21.21.0.0 network to its global interface address.

Is the nat (inside) 0 0.0.0.0 0.0.0.0 the cause for not able to translate? Is it safe to remove this command?

thanks,

Julio Carvajal — Fri, 20 Jan 2012 06:45:35 GMT

Hello Kope,

Yes, that is the cause of the issue, please remove it!

Removing this you will start making translation from the inside of your ASA, that is all that is going to change.

Regards,

Do rate helpful posts

Julio

topic Needs help on NAT in Network Security