ASA Static NAT Fails

[Chuan Liu]

Hi,

I am working on an ASA7.1. Dynamic NAT is working, but static NAT is not working as expected. Static NAT config is as below:

static (Inside,Outside)  tcp 202.162.181.202 telnet 10.64.0.254 telnet netmask 255.255.255.255

'show nat' shows hits after testing telnet from Internet. Capture shows traffic in Outside interface, but none in Inside interface for this test.

match tcp Inside host 10.64.0.254 eq 23 Outside any eq 23

    static translation to 202.162.181.202/23

    translate_hits = 0, untranslate_hits = 12

No ALC denies the traffic in Inside interface.

Any idea?

Thanks in advance.

[Jouni Forss]

Hi,

I gather the public IP address mentioned there is the outside interface IP?

If it is can you try replacing the public ip with the parameter "interface" ?

Not sure if it will help but can't think of anything else right now looking at the configuration you provided.

- Jouni