topic Can't get traffic out in Network Security https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820720#M490975 <HTML><HEAD></HEAD><BODY><P>Hi Mikael,</P><P></P><P>Yes that's right, you would need this:</P><P></P><P>nat (inside) 1 0 0</P><P>nat (wlan) 1 0 0 </P><P>nat (client) 1 0 0</P><P>nat (server) 1 0 0 </P><P>nat (dmz) 1 0 0</P><P>global (outside) 1 interface</P><P></P><P>Hope this helps.</P><P></P><P>please do rate helpful posts.</P><P></P><P>Thanks,</P><P>Varun</P></BODY></HTML> Fri, 16 Dec 2011 17:48:35 GMT varrao 2011-12-16T17:48:35Z Can't get traffic out https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820717#M490971 <P>Hi,</P><P></P><P>I just configure my PIX 515E with version 7.0(4) and having problems to get traffic out on eth0 (if name outside). There is no problems between different VLAN ,all VLANs are configure on eth1. It is also possible to accass services on VLAN 10 (DMZ) from outside. The only thing I see in syslog is "Built Outbound" and "Teardown". </P><P></P><P>See my configuration in attached file.</P><P></P><P>Regards</P><P>Mikael</P> Mon, 11 Mar 2019 22:02:54 GMT https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820717#M490971 Mikael Sveden 2019-03-11T22:02:54Z Can't get traffic out https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820718#M490972 <HTML><HEAD></HEAD><BODY><P>Hi Mikael,</P><P></P><P>You are missing this statement:</P><P></P><P>nat (inside) 1 0.0.0.0 0.0.0</P><P>global (outside) 1 interface</P><P></P><P>and please remove this:</P><P></P><P>nat (inside) 0 0.0.0.0 0.0.0.0</P><P></P><P>It shoudl work after this.</P><P></P><P>Hope that helps.</P><P></P><P>Thanks,</P><P>Varun</P></BODY></HTML> Fri, 16 Dec 2011 17:26:09 GMT https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820718#M490972 varrao 2011-12-16T17:26:09Z Can't get traffic out https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820719#M490973 <HTML><HEAD></HEAD><BODY><P>Thanks Varun for quick answer.</P><P></P><P>I'm sitting on VLAN 13 (client) and I'm still not able to "get out". Do I have to create nat entry for all VLANs?</P><P></P><P>/Mikael</P></BODY></HTML> Fri, 16 Dec 2011 17:43:21 GMT https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820719#M490973 Mikael Sveden 2011-12-16T17:43:21Z Can't get traffic out https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820720#M490975 <HTML><HEAD></HEAD><BODY><P>Hi Mikael,</P><P></P><P>Yes that's right, you would need this:</P><P></P><P>nat (inside) 1 0 0</P><P>nat (wlan) 1 0 0 </P><P>nat (client) 1 0 0</P><P>nat (server) 1 0 0 </P><P>nat (dmz) 1 0 0</P><P>global (outside) 1 interface</P><P></P><P>Hope this helps.</P><P></P><P>please do rate helpful posts.</P><P></P><P>Thanks,</P><P>Varun</P></BODY></HTML> Fri, 16 Dec 2011 17:48:35 GMT https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820720#M490975 varrao 2011-12-16T17:48:35Z Can't get traffic out https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820721#M490978 <HTML><HEAD></HEAD><BODY><P>You are my hero, it works!</P><P></P><P>Regards Mikael</P></BODY></HTML> Fri, 16 Dec 2011 17:56:13 GMT https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820721#M490978 Mikael Sveden 2011-12-16T17:56:13Z Can't get traffic out https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820722#M490980 <HTML><HEAD></HEAD><BODY><P>My Pleasure <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/happy.gif"></SPAN></P><P></P><P>Varun</P></BODY></HTML> Fri, 16 Dec 2011 18:00:17 GMT https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820722#M490980 varrao 2011-12-16T18:00:17Z Can't get traffic out https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820723#M490983 <HTML><HEAD></HEAD><BODY><P>I was so lucky when I reach out that I forgot to test to connect to the other VLAN:s... and of cours that is not working...</P><P>"No translation group found for tcp src client:192.168.13.102/51074 dst dmz:srv004/22"</P><P></P><P>/Mikael</P></BODY></HTML> Fri, 16 Dec 2011 18:22:26 GMT https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820723#M490983 Mikael Sveden 2011-12-16T18:22:26Z Can't get traffic out https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820724#M490987 <HTML><HEAD></HEAD><BODY><P>From whihc vlan are you trying to connect to whihc vlans??</P><P></P><P>Varun</P></BODY></HTML> Fri, 16 Dec 2011 18:45:02 GMT https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820724#M490987 varrao 2011-12-16T18:45:02Z Can't get traffic out https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820725#M490990 <HTML><HEAD></HEAD><BODY><P>from 13 (client) to 10 (DMZ). But I also having problems in the other direction.</P></BODY></HTML> Fri, 16 Dec 2011 18:56:27 GMT https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820725#M490990 Mikael Sveden 2011-12-16T18:56:27Z Can't get traffic out https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820726#M490994 <HTML><HEAD></HEAD><BODY><P>for 13 to 10 add:</P><P></P><P>static (dmz,client) 192.168.10.0 192.168.10.0</P><P></P><P>Varun</P></BODY></HTML> Fri, 16 Dec 2011 19:03:28 GMT https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820726#M490994 varrao 2011-12-16T19:03:28Z Can't get traffic out https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820727#M490995 <HTML><HEAD></HEAD><BODY><P>Once again, Thank you!</P><P>I will use this community more <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/happy.gif"></SPAN></P></BODY></HTML> Fri, 16 Dec 2011 19:19:27 GMT https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820727#M490995 Mikael Sveden 2011-12-16T19:19:27Z Can't get traffic out https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820728#M490996 <HTML><HEAD></HEAD><BODY><P>Hey thats gr8 <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/happy.gif"></SPAN></P><P></P><P>Varun</P></BODY></HTML> Fri, 16 Dec 2011 19:20:25 GMT https://community.cisco.com/t5/network-security/can-t-get-traffic-out/m-p/1820728#M490996 varrao 2011-12-16T19:20:25Z