Static NAT problems

mraliisahin — Mon, 11 Mar 2019 22:50:24 GMT

Hi there.

I have this very strange problem. Can someone explain me why this is happening? I have two static. One of them is working fine. But the another seems to go thoug diffrent interface (mynoc).

Config:

static (dmz,outside) AA AB netmask 255.255.255.255

static (dmz,outside) AAA ABB netmask 255.255.255.255

Pacet trace result

This one is chosing wrong interface?

Phase: 8
Type: NAT
Subtype:
Result: ALLOW
Config:
static (dmz,outside) AA AB netmask 255.255.255.255
nat-control
match ip dmz host AB outside any
static translation to AA
translate_hits = 561, untranslate_hits = 0
Additional Information:
Static translate AB/0 to AA/0 using netmask 255.255.255.255

Phase: 9
Type: NAT
Subtype: host-limits
Result: ALLOW
Config:
static (dmz,mynoc) AA AA netmask 255.255.255.0
nat-control
match ip dmz AB 255.255.255.0 dnoc any
static translation to AB
translate_hits = 833229, untranslate_hits = 189
Additional Information:

This one is working fine:

Phase: 8
Type: NAT
Subtype:
Result: ALLOW
Config:
static (dmz,outside) AAA ABB netmask 255.255.255.255
nat-control
match ip dmz host ABB outside any
static translation to AAA
translate_hits = 10882, untranslate_hits = 99015
Additional Information:
Static translate ABB/0 to AAA/0 using netmask 255.255.255.255

Phase: 9
Type: NAT
Subtype: host-limits
Result: ALLOW
Config:
static (dmz,outside) AAA ABB netmask 255.255.255.255
nat-control
match ip dmz host ABB outside any
static translation to AAA
translate_hits = 10882, untranslate_hits = 99015
Additional Information:

Static NAT problems

varrao — Wed, 04 Apr 2012 12:51:32 GMT

Hi,

You seem to have two conflicting static:

static (dmz,mynoc) AA AB netmask 255.255.255.0

static (dmz,outside) AA AB netmask 255.255.255.255

Can you please let me know which one is correct, because the first one has a mask of /24

Varun

Re: Static NAT problems

mraliisahin — Wed, 04 Apr 2012 12:57:34 GMT

Sorry my mistake.

This one is correct one.

static (dmz,mynoc) AA AA netmask 255.255.255.0

static (dmz,outside) AB AA netmask 255.255.255.255

Do you have any idea?

topic Static NAT problems in Network Security

Static NAT problems

Static NAT problems

Re: Static NAT problems