topic GRE with Static NAT on ASA 5540 running 8.2 in Network Security

GRE with Static NAT on ASA 5540 running 8.2

amardram123 — Mon, 11 Mar 2019 18:00:12 GMT

Hi,

I am trying to run below command

access-list test extended permit gre host 192.x.x.x any

static (inside,outside) 59.x.x.x access-list test

after putting static command i get error saying

protocol mismatch between the static and access-list

need help to find if gre protocol is supported using static nat or not as when calling access-list with any port under tcp or udp protocol it works.

Regards

Amar

Re: GRE with Static NAT on ASA 5540 running 8.2

edadios — Wed, 16 Jun 2010 12:20:25 GMT

See the syntax per documentation :

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/s8.html#wp1512466

####

This access list should include only permit ACEs. You can optionally specify the real and destination ports in the access list using the eq operator.

###

The protocol you used is not allowed to be used for access-list on Static . You can use tcp or udp, or topgether with specific port.

Regards,