ASA-5506X Static Route

[jdrose_2]

Trying to add a static route: static (inside,outside) x.x.x.x 192.168.0.2 netmask 255.255.255.0

Receiving the attached error.  Is it a different syntax to add this command on the 5506X?

[Karsten Iwen]

It's a static NAT that you are trying to configure. The syntax changed in ASA version 8.3. Look at Jounis excellent document to learn about the differences:

https://supportforums.cisco.com/document/132066/asa-nat-83-nat-operation-and-configuration-format-cli

[Ganesh Hariharan]

Hello,

adding routing in ASA is done as follows 

ciscoasa(config)# route outside 110.10.110.0 255.255.255.0 192.168.13.3

Where interface name where the destination subnet resided and gateway.

Hope it Helps..

-GI

Rate if it Helpss

[Akshay Rastogi · Accepted solution]

Hi there,

Configure Object for the inside host and then configure the nat inside that object.

Object network obj-192.168.0.2

 host 192.168.0.2

 nat (inside,outside) static x.x.x.x

make sure (this x.x.x.x is not outside interface ip. If it is, then use 'interface' keyward instead of x.x..x.x).

Also if you are trying to connect to this Internal server from Outside hosts then add access-list on Outside interface to permit the real IP. Something like :

access-list outside_in permit ip any host 192.168.0.2

access-group outside_in in interface outside.

Note : we need to give real IP address in destination for inbound access-list post 8.3 instead of Mapped IP.

hope this helps.

Regards,

Akshay Rastogi

[jdrose_2]

Hi Akshay,

The Object network obj-192.168.0.2 command work fine.  The firewall would not take the host 192.168.0.2 or nat (inside,outside) static x.x.x.x commands.  Any suggestions?

Thank you!

[Akshay Rastogi]

Hi,

These commands needs to be configured under this object which you created. I hope you are doing that. Also what error are you getting if already doing what i mentioned?

Regards,

Akshay Rastogi