topic Re: interface overlaps with the static defined by: in Network Security

interface overlaps with the static defined by:

Thomas Reiling — Mon, 11 Mar 2019 20:13:05 GMT

What does the following mean, and how can I fix it:

WARNING: The IP address, xxx.172.214.193, of the 'outside' interface overlaps with
the static defined by:
'static (inside, outside) xxx.172.214.193 10.2.28.3 netmask 255.255.255.255'.
TRY THIS: Re-check the interface IP addresses and 'static' statements

Thanks,

Thomas

Re: interface overlaps with the static defined by:

Jon Marshall — Sat, 26 Mar 2011 17:20:26 GMT

jack6109518 wrote:
What does the following mean, and how can I fix it:
WARNING: The IP address, xxx.172.214.193, of the 'outside' interface overlaps with
the static defined by:
  'static (inside, outside) xxx.172.214.193 10.2.28.3 netmask 255.255.255.255'.
TRY THIS: Re-check the interface IP addresses and 'static' statements
Thanks,
Thomas

Thomas

It simply means you are trying to use the same IP for a static translation as you have assigned to the outside interface.

If you want to NAT all ports to 10.2.28.3 then you need another public IP to use. However if you only wanted to NAT certain ports then you can do ie.

lets say 10.2.28.3 is a web server and a mail server -

static (inside,outside) tcp xxx.172.214.193 25 10.2.28.3 25 <-- for mail

static (inside,outside) tcp xxx.172.214.193 80 10.2.28.3 80 <-- for http

Jon

Re: interface overlaps with the static defined by:

PAUL GILBERT ARIAS — Sat, 26 Mar 2011 17:30:39 GMT

your example is fine but instead of the IP of the interface type the word "interface"

static (inside,outside) tcp interface 25 10.2.28.3 25

Re: interface overlaps with the static defined by:

Thomas Reiling — Sat, 26 Mar 2011 17:54:17 GMT

Paul,

Thank you for responding. Just wanted to know how using the word "interface" as opposed to the ip address of the interface would benefit me in this scenario. Would this fix my issue?

Thanks again,

Thomas

Re: interface overlaps with the static defined by:

Thomas Reiling — Sat, 26 Mar 2011 17:58:31 GMT

Jon,

Thank you for responding. Here's another similar one that I don't understand. It seems like the static statmement is translating an inside address to the same inside address. How can I fix this?

WARNING: The IP address, xxx.172.214.193, of the 'outside' interface overlaps with
the static defined by:
'static (inside, outside) 10.2.28.0 10.2.28.0 netmask 255.255.255.255'

Thanks,

Thomas

Re: interface overlaps with the static defined by:

PAUL GILBERT ARIAS — Sat, 26 Mar 2011 21:05:25 GMT

It should be with the keyword interface wirh the ip might not work

Sent from Cisco Technical Support iPhone App