ASA nat issue

[Kashish_Patel]

My ASA running 8.4(4) is matching a nat entry when it is supposed to match a different nat statement. What might be wrong?

[juan-ruiz]

Hi Kashish,

can you post your nat configs?

show run nat and highlight which NAT should be executed in order.

Also include the subnets as you might of used group names that may not represent the actual network.

Thanks,

JR

[juan-ruiz]

Some backgroud info on NAT and how they are applied.

Twice nats are applied first, then object network nats with static and dynamic nats included.

What kind of nats are they?

[Kashish_Patel]

I have sent you "show run nat" and "packet tracer" output. In "show run nat", I have mentioned which line it is matching and which one it is supposed to match.

[Kashish_Patel]

Actually it was the bug:

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtq47028

I applied the workaround

[Julio Carvajal]

Hello Kashish,

I was just about to send you that particular bug.

Great to hear that you fix it, please mark the question as answered so future users can learn from this,

Regards,

Julio