topic Re: error pool overlapping with the existing Pool. in Network Security

error pool overlapping with the existing Pool.

bluesea2010 — Fri, 21 Feb 2020 17:31:14 GMT

Asa version 8.3.(1) .

Hi,

I am getting the error pool overlapping with the existing Pool. But I don't know why it is giving the warning

interface GigabitEthernet0/0

nameif Outside

security-level 0

ip address 1.1.1.2 255.255.255.248 standby 1.1.1.3

object network test

Host 10.0.2.10

object network o-nat

host 1.1.1.4

object network test

nat (inside,Outside) dynamic o-nat

It was just warning . But the real problem is internet is not working

If I give nat (Inside,outside) dynamic interface then the internet is working .

Here is 10.0.2.10 is not a host, in fact it is NATed IP of subnet 192.168.2.0/24 from another firewall .

I tried the below also

nat (inside,outside) source dynamic test o-nat ,but not worked

Please help

Thanks

Re: error pool overlapping with the existing Pool.

Marvin Rhoads — Tue, 24 Sep 2019 14:28:38 GMT

You have only shared a small snippet of the configuration. We would need to see it all to determine where the conflict is coming from.

Re: error pool overlapping with the existing Pool.

bluesea2010 — Tue, 24 Sep 2019 14:55:09 GMT

Hi,

I will share the full configuration after sanitizing,

Meanwhile, I will share another snippet.

The current nat configuration as below

object network test2

nat (inside,Internet) dynamic interface

object network test

nat (inside,Internet) dynamic interface

I am trying to change NAT for "object network test "

object network test

Host 10.0.2.10

object network o-nat

host 1.1.1.4

previous conf

object network test

nat (inside,outside) dynamic interface

after changing

object network test

nat (inside,Outside) dynamic o-nat

Thanks

Re: error pool overlapping with the existing Pool.

bluesea2010 — Tue, 24 Sep 2019 20:24:53 GMT

Hi,

I can see there is dynamic and static nat for the same network ,

It could be an issue

nat (inside,Internet) source static admin admin destination static rusers rusers
!

object network admin
nat (inside, outside) dynamic interface

object network rusers
nat (any,Internet) dynamic interface

Thanks