https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084247#M907601 <P>object network obj_any<BR />&nbsp;nat (inside,outside) dynamic interface</P> <P>Replace with..</P> <P>object network obj_any</P> <P><SPAN class="pln">nat </SPAN><SPAN class="pun">(</SPAN><SPAN class="pln">inside</SPAN><SPAN class="pun">,</SPAN><SPAN class="pln">outside</SPAN><SPAN class="pun">)</SPAN><SPAN class="pln"> after</SPAN><SPAN class="pun">-</SPAN><SPAN class="kwd">auto</SPAN><SPAN class="pln"> source </SPAN><SPAN class="kwd">dynamic</SPAN><SPAN class="pln"> any </SPAN><SPAN class="kwd">interface</SPAN></P> <P></P> Wed, 21 Jun 2017 13:09:07 GMT vmorreale 2017-06-21T13:09:07Z https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084244#M907588 <P>Hello Cisco World!</P> <P>Having an issue with my configuration from my ASA5505 8.25 upgrading to 9.1.6. I have a feeling it's NAT related however I'm not experienced enough to grasp the changes at this time and looking for some help.&nbsp; On the 9.1.6 the setting is nat (inside,outside) dynamic interface and on the 8.25 the setting is global (outside) 1 interface nat (inside) 1 0.0.0.0 0.0.0.0.&nbsp; However the 9.1.6 doesn't work with our vendors configurations.&nbsp; I don't mind downgrading but would rather not. Any Help out there???</P> Fri, 21 Feb 2020 14:11:19 GMT https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084244#M907588 vmorreale 2020-02-21T14:11:19Z https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084245#M907592 <P>What is the issue you are seeing?</P> <P>Is that your only NAT statement? It would typically more properly be as shown below. Try removing and re-adding it thus:</P> <PRE class="prettyprint">no <SPAN>nat (inside,outside) dynamic interface</SPAN><BR />nat (inside,outside) after-auto source dynamic any interface</PRE> Wed, 21 Jun 2017 12:59:49 GMT https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084245#M907592 Marvin Rhoads 2017-06-21T12:59:49Z https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084246#M907597 <P>Marvin,</P> <P>&nbsp;&nbsp;&nbsp; Will do and let you know thanks a million...</P> Wed, 21 Jun 2017 13:04:50 GMT https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084246#M907597 vmorreale 2017-06-21T13:04:50Z https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084247#M907601 <P>object network obj_any<BR />&nbsp;nat (inside,outside) dynamic interface</P> <P>Replace with..</P> <P>object network obj_any</P> <P><SPAN class="pln">nat </SPAN><SPAN class="pun">(</SPAN><SPAN class="pln">inside</SPAN><SPAN class="pun">,</SPAN><SPAN class="pln">outside</SPAN><SPAN class="pun">)</SPAN><SPAN class="pln"> after</SPAN><SPAN class="pun">-</SPAN><SPAN class="kwd">auto</SPAN><SPAN class="pln"> source </SPAN><SPAN class="kwd">dynamic</SPAN><SPAN class="pln"> any </SPAN><SPAN class="kwd">interface</SPAN></P> <P></P> Wed, 21 Jun 2017 13:09:07 GMT https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084247#M907601 vmorreale 2017-06-21T13:09:07Z https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084248#M907606 <P>I prefer not to do that one as an object NAT.</P> <P>Just a NAT statement in the after-auto section so that it is the last rule that's hit (after any identity or object NAT rules).</P> Wed, 21 Jun 2017 13:19:24 GMT https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084248#M907606 Marvin Rhoads 2017-06-21T13:19:24Z https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084249#M907609 <P>Marvin, Thanks will let you know. The store is in PR so I have to wait till they get in.</P> Wed, 21 Jun 2017 13:47:55 GMT https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084249#M907609 vmorreale 2017-06-21T13:47:55Z https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084250#M907614 <P>Marvin, Worked like a charm! Thank you so much..... Look me up on facebook Victor Morreale.&nbsp;</P> Thu, 22 Jun 2017 12:35:13 GMT https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084250#M907614 vmorreale 2017-06-22T12:35:13Z https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084251#M907616 <P>Good to know it worked. Thanks for the feedback and rating.</P> Thu, 22 Jun 2017 13:35:28 GMT https://community.cisco.com/t5/network-security/cisco-asa-5505-version-8-2-5-to-9-1-6/m-p/3084251#M907616 Marvin Rhoads 2017-06-22T13:35:28Z