ASA add dns keyword to existing static NAT entry.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-20-2015 11:17 PM - edited 03-11-2019 11:46 PM
Dear Experts,
is there a way to add a dns keyword to the existing static NATs without interrupting traffic flows or removing the entry?
I am getting this error when trying just to past the second line with dns keyword in cli:
ERROR: mapped-address conflict with existing static
- Labels:
-
NGFW Firewalls

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-21-2015 06:50 AM
Hi,
Where have been adding this entry. What ASA version are you running on ASA?
Please show how you are adding the entry. if you are using a separate object to create static nat with dns then it could generate this kind of error. or else it overwrite the existing one.
Regards,
Akshay Rastogi
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-21-2015 06:54 AM
My ASA version is 8.0(34)
It doesn't overwrite, but just makes and error:
ERROR: mapped-address conflict with existing static

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-21-2015 10:52 AM
Hi,
Yes, with version 8.0(34) it does not overwrite.
However in ver post 8.3, you could configure the same without removing the nat statement. As mentioned in the last comment, it would overwrite the old nat with new nat.
Regards,
Akshay Rastogi
