Clear XLATE break all current connections using NAT on the ASA?

[CiscoPurpleBelt]

Clear XLATE break all current connections using NAT on the ASA?

[Rob Ingram]

Hi,
Well it clears the nat sessions on the device and therefore the current connections, TCP applications should detect packet loss and re-transmit and a new nat session will be established.

HTH

[CiscoPurpleBelt]

Awesome great!

In regards to a IPSEC VPN on ASA, can you simply add a new host or create a new object-group and add all the source hosts in the IPSEC profile on ASA without breaking anything assuming remote end has allowed the new host?

[Rob Ingram]

Yes, you can add the new network/host to the ACL or to the object group that is referenced in the ACL in use by the crypto map. Nothing should break, as long as both ends of the VPN tunnel have been configured with the same host/network with the correct mask.