07-10-2010 05:19 PM - edited 03-11-2019 11:09 AM
Hello,
I have an ASA 5505 that won't take the static or global commands for NAT.
ASA5505# conf t
ASA5505(config)# static
ERROR: % Incomplete command
or
ASA5505# conf t
ASA5505(config)# global
ERROR: % Incomplete command
Sorry I have very little Cisco firewall experience, but isn't the below command valid?
static (inside,outside) 74.1.1.1 10.1.1.1 netmask 255.255.255.255
I am running Cisco Adaptive Security Appliance Software Version 8.3(1).
I also have the base license. ASA5505-50-BUN-K9
Thanks
Solved! Go to Solution.
07-10-2010 05:54 PM
No, from version 8.3.1 onwards, the NAT statements have completely changed.
Pre 8.3.1:
static (inside,outside) 74.1.1.1 10.1.1.1 netmask 255.255.255.255
Now change to:
object network obj-10.1.1.1
host 10.1.1.1
nat (inside,outside) static 74.1.1.1
NAT in version 8.3.1 is divided into 2:
1) Network object NAT (auto NAT)
2) Twice NAT (manual NAT)
Here is more information to get familiarise with the new NAT:
http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/nat_overview.html#wp1122015
Hope that helps.
07-10-2010 05:54 PM
No, from version 8.3.1 onwards, the NAT statements have completely changed.
Pre 8.3.1:
static (inside,outside) 74.1.1.1 10.1.1.1 netmask 255.255.255.255
Now change to:
object network obj-10.1.1.1
host 10.1.1.1
nat (inside,outside) static 74.1.1.1
NAT in version 8.3.1 is divided into 2:
1) Network object NAT (auto NAT)
2) Twice NAT (manual NAT)
Here is more information to get familiarise with the new NAT:
http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/nat_overview.html#wp1122015
Hope that helps.
07-10-2010 07:52 PM
Thanks, so much. Everything makes sense now. I am no longer confused. I rolled back to 8.2(2).
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide