topic Re: ASA 55xx issue in Network Security

ASA 55xx issue

rjrii — Tue, 26 Mar 2019 00:39:34 GMT

I'm having issues with a new ASA implementation. I have some direct one-to-one translations specificed and I want all the rest of my outbound traffic to go out the global PAT address, but for some reason, all traffic, including inside hosts with outside NATs are appearing as the global PAT address.

Config attached

Re: ASA 55xx issue

acomiskey — Mon, 21 Apr 2008 15:02:24 GMT

Your statics are backwards. Should be...

static (inside,outside) 208.xxx.xxx.163 192.168.1.220 netmask 255.255.255.255

Re: ASA 55xx issue

rjrii — Mon, 21 Apr 2008 15:27:58 GMT

OMG! Sleep deprivation is not good, people! Thanks, acomiskey!

This setup is a conversion from an IP Chains linux firewall and I realize what I did. While documenting the static mappings I used Excel to create my internal and external columns. I then concatenated everything into the cisco static command format and switched my internal and external columns around.

Thanks again!

Randy