ASA Backup interface not allowing users out
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-20-2006 12:59 PM - edited 02-21-2020 01:11 AM
I have configured the ASA backup interface command to the specs on the website below. The problem isnt that the ASA is failing over but it's not allowing my internal users to get out once the backup interface comes online. I am able to reach it via ssh outside, etc. I tried adding additional nat and global statements that corresponding to the backup interface but i dont see that anywhere on the documentation. thanks.
nat (inside) 1 0.0.0.0 0.0.0.0
nat (backup) 2 0.0.0.0 0.0.0.0
global (OUTSIDE) 1 interface
global (backup) 2 interface
- Labels:
-
Other Network Security Topics
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-26-2006 11:13 AM
What version of software are you using in the ASA box ?.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-27-2006 06:30 AM
7.2(1)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-26-2006 04:37 PM
Hi Try this ..
nat(inside) 1 0 0
global (outside) 1 interface
nat (inside) Y 0 0
global (backup) Y interface
where Y is any nat-id number that you are not already using on your nat/global statements .. ie ..
nat (inside) 30 0 0
global (backup) 30 interface
I hope it helps .. please rate it if it does !!!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-27-2006 06:30 AM
hey this is the message i get with this..
GAUNTLET(config)# nat (inside) 5 0.0.0.0 0.0.0.0
Duplicate NAT entry
it takes the global statement fine.
i am using ver 7.2(1)
thanks for the reply, any other ideas?
