ASA static NAT

[Halil.Zakaria]

hello,

is it normal to find two identic NAT  translations for a unqiue static nat statement. ?

HOSTNAME# sh runn | i INSIDE_nat_static_syntesys
access-list INSIDE_nat_static_syntesys_1 extended permit ip host FRCOCAT object-group Grp_Net_Syntesys

static (INSIDE,DMZ-Prod) 172.24.4.1  access-list INSIDE_nat_static_syntesys_1


HOSTNAME#
HOSTNAME# sh xlate detail | i 172.24.4.1       
NAT from INSIDE:FRCOCAT to DMZ-Prod(INSIDE_nat_static_syntesys_1):172.24.4.1 flags s
NAT from INSIDE:FRCOCAT to DMZ-Prod(INSIDE_nat_static_syntesys_1):172.24.4.1 flags s
HOSTNAME# sh xlate | i 172.24.4.1              
Global 172.24.4.1 Local FRCOCAT
Global 172.24.4.1 Local FRCOCAT
HOSTNAME#

Your help is always precious to us

[Akshay Rastogi]

Hi Halil,

I believe there are two destination IPs defined in the access-list 'INSIDE_nat_static_syntesys_1' that is the reason it is showing two xlate entries for the single NATTed IP.

It is expect and nothing wrong. It is as per design. 

Hope it answers your queries.

Regards,

Akshay Rastogi

Remember to rate helpful posts.