topic Re: portmap translations failed from inside to inside in Network Security

portmap translations failed from inside to inside

carl_townshend — Mon, 11 Mar 2019 17:53:16 GMT

Hi all

I am gettings lots of errors on my firewall, saying portmap translation failed, but the thing is both ip addresses exist on the inside interface, so why is the firewall doing this?

I have turned nat control off just in case.

any ideas?

Carl

Re: portmap translations failed from inside to inside

Federico Coto Fajardo — Tue, 01 Jun 2010 13:56:35 GMT

Hi Carl,

You have static PAT configured on the Firewall?

When do you get those errors?

What do you mean with both IP addresses exist on the inside interface?

If there's a communication between two IPs on the same segment, this traffic should not go through the Firewall (unless there's something not configured correctly).

Please explain.

Federico.

Re: portmap translations failed from inside to inside

carl_townshend — Wed, 02 Jun 2010 09:06:29 GMT

there is PAT configured on the firewall, the addresses I am seeing are addresses that are on the inside of the network so shouldnt even be touching the firewall, would this be a routing issue somewhere?? the firewall is running eigrp and the route to inside is load balanced to 2 locations, would this affect it ?

cheers

Carl

Re: portmap translations failed from inside to inside

Panos Kampanakis — Thu, 03 Jun 2010 00:31:26 GMT

Probably this is a routing issue since you are saying that these packets should be routed internally and not even hit the ASA.

I would check the previous hop and its routing for the ip addresses involved.

I hope it helps.