ASA NAT Issue

[ahcimran1]

Hi,

I have a Desktop with ip:10.10.3.4 in my network. In this PC internet working.

when i try to add the NAT command in Cisco ASA 5510 -  in this scenario 10.10.3.4 to some public ip X.X.X.X (one to one natting)

static (inside,outside) X.X.X.X 10.10.3.4 netmask 255.255.255.255

Issues are:

1. Internet on this local pc is not working (i.e.., 10.10.3.4)

2. Public ip also not accessable from outside.

Thanks for you valuable time and consideration.

[Charles W]

Just a shot in the dark - have you added rules to permit the relevant traffic to your host?

[Ruben Cocheno]

i believe you have already the access-group outside inbound. Check the rules and in last case the Logs messages on Firewall because it help always

[ahcimran1]

I have already added the rules to permit the relevant traffic to my host.

how to check the logs messages on firewall?

[Ruben Cocheno]

using ASDM:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113053-asa82-syslog-config-00.html#enablelog

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113053-asa82-syslog-config-00.html#veri

Using CLI via console/telnet/

Configure the following on the Cisco ASA:

ciscoasa(config)#logging monitor 7
ciscoasa(config)#logging console 7
ciscoasa(config)#terminal monitor
ciscoasa(config)#logging on
ciscoasa(config)#logging trap 6
ciscoasa(config)#sh logg