cancel
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
1168
Views
4
Helpful
3
Replies

Global statement without a Nat statement

marktaipp
Level 1
Level 1

Hi,

On our ASA 5510 (running IOS 7.2) we have a global statement that does not have a corresponding nat statement e.i. global (outside) 2 x.x.x.x , but no nat (inside) 2 blah 255.255.0.0

I am assuming that this is a mistake and that global without a nat pair does nothing. Or does it?

Thanks

Mark               

1 Accepted Solution

Accepted Solutions

Jennifer Halim
Cisco Employee
Cisco Employee

you are absolutely correct, nat/global statements needs to come in pair.

View solution in original post

3 Replies 3

Jennifer Halim
Cisco Employee
Cisco Employee

you are absolutely correct, nat/global statements needs to come in pair.

Jon Marshall
Hall of Fame
Hall of Fame

Mark

Worth checking if you have any other interfaces on the firewall other than the inside interface to see if there is a nat (interface) 2 statement.

Jon

Hi Jon,

The firewall has three interfaces inside, outside and DMZ. But is also no "nat (DMZ) 2 blah 255.255.255.0" statement to match the global. I have inherited the config and think that a nat/global pair was but in for what ever resaon, then half pulled out. I wanted to make sure that global statement by itself did nothing and could be removed.

Thanks for your suggestion.

Mark

Review Cisco Networking for a $25 gift card