topic Re: Multiple static nat problem. in Network Security

Multiple static nat problem.

mnetworksas — Mon, 11 Mar 2019 11:10:08 GMT

Hi all.

I have a problem whit a Cisco ASA 5505

My problem is nating from the outside in.

About my setup:

I have a 28 bit subnet from my ISP.

- One for the GW

- One for the ASA

- One for the ISP Switch

The rest is free for me to use.

The Problem:

When a try to nat in other IP's then the ASA IP I only get the first to work.

I have attached my config.

This won't work:

static (inside,outside) 91.189.xxx.166 192.168.2.11 netmask 255.255.255.255

This works:

static (inside,outside) 91.189.xxx.167 192.168.2.6 netmask 255.255.255.255

Can any one help me please 🙂

Thanks,

Stig Bollund

Re: Multiple static nat problem.

mattiaseriksson — Wed, 12 Sep 2007 11:27:45 GMT

Hi Stig,

Have you tried different outside IP's?

Enter 'clear xlate' after you change any NAT statements.

The logfile should give you information why a translation fails so check there as well.

But I can't see any problem in the configuration.

Regards,

/Mattias

Re: Multiple static nat problem.

mnetworksas — Wed, 12 Sep 2007 11:33:58 GMT

Hummmm.....

If I use another IP, then it works.

That I dont like..

One the IP that dosen't work:

It nat's okay, and I used the clear xlate around 100 times 🙂

Thanks..

Re: Multiple static nat problem.

mattiaseriksson — Wed, 12 Sep 2007 11:42:17 GMT

Perhaps that IP is being used already. Remove the NAT statement, ping that IP from the ASA and then check with 'show arp' if it still has an arp entry for it.

Check the logfile for error messages.

The last part about 'It nat's okay' I did not quite understand. What NAT's ok?

Re: Multiple static nat problem.

rajko.bogdanovic — Wed, 12 Sep 2007 12:49:34 GMT

Just one question

Have you tried it combined with access lists?

Re: Multiple static nat problem.

mnetworksas — Wed, 12 Sep 2007 15:42:52 GMT

Hi all.

Thanks for replying.

The problem was the ARP table on my ISP's Router.

The problem is fixed.