ASA 5506-X NAT Failing.

[cktuckerini]

I apologize for creating such a noob post however, I'm stumped.  ASA 5506-X and am attempting to NAT traffic to a Mitel phone system.  I have quite a few NAT rules working perfectly well but when I attempt to NAT ports 67-69 and  50098-50508 I receive:

Pool (0.0.0.0) overlap with existing pool

Error: NAT unable to reserve ports.

Objects and access lists create perfectly well.

There something very simple I'm missing, I'm sure.  I'm attaching current running cfg and changes I'm attempting to apply.  Again, only the above ports (services Mitel_3 and Mitel_8) are failing. 

[bhargavdesai · Accepted solution]

Could you check if there are any existing connections and xlate enties for the ports ?
sh connection | in 50098
show xlate | in 50098
If there is any entry try clearing it using clear xlate/clear conn command and then try applying the static NAT.

You can also use the following command to see if the ASA is using the mentioned port still for some reasons.
show asp table socket

HTH
### RATE ALL HELPFUL RESPONSES ###

[cktuckerini]

Thank you for those useful commands however, none are showing anything on the problematic ports.  Anything else I can check?

[cktuckerini]

*** Update. I broke the 67-69 range out into single port objects and I can nat port 69 but not 67 or 68 (get the above error message). Could it be because the asa is acting as a DHCP server?

I've also determined how to properly use the sh xlate command with wildcards for the port range and found/cleared several random connections on ports 501xx, 502xx and 504xx.  Once I cleared those I was able to successfully add the nat to object "Mitel_8".  I sincerely appreciate your time and the new knowledge!