ASA 5510 - ERROR: NAT Policy is not downloaded

[Difan Zhao]

Hi experts,

I removed my object by mistake and I can't add it back anymore... It keeps giving me this error...

The config was like

object network Prod-100-HTTPS

host 10.26.231.100

nat (inside,outside) static x.x.x.152 service tcp https 6440

Now I can have the object created with the host however for some reason I can't apply the nat configuration to it...

fw-01(config-network-object)#nat (inside,outside) static x.x.x.152 service tcp https 6440  

ERROR: NAT Policy is not downloaded

Also there is no in-use NAT entry for this IP...

fw-01(config)# sh nat 10.26.231.100 detail

No matching NAT policy found

This is really frustrating... I think it is because I "removed" the object before removing the NAT config... Anyway to fix this??

Thanks!

[Julio Carvajal · Accepted solution]

Hello Difan,

This is a known behavior for me,

To fix it right now:

1) Copy all the existing nat config

2) do clear configuration nat

3) configure all the nat statements again ( paste )

I know it sounds add but the thing is that the NAT process on the ASA got stuck ( being there done that )

Remember to rate all of the helpful posts

Julio

[Difan Zhao]

Thanks very much Julio. I hope this is considered as bug and will be fixed in future release...

[Julio Carvajal]

Hello,

Glad to hear that

Regards

[Michael Muenz]

Which version is/was affected? I'm running 8.4.5 and hit the same.

Is this already fixed with 8.4.6 or 7?

Michael

Please rate all helpful posts