Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
953
Views
0
Helpful
10
Replies

Help Configuring ASA 5505 9.1 from 8.2

meGunnett
Level 1
Level 1

‎05-23-2015 06:48 AM - edited ‎03-11-2019 10:59 PM

Hello,

I have been using an ASA 5505 as a router with multiple VLANs as all my switches are Layer 2. The ASA is responsible for InterVLAN routing. I'm attempting to upgrade to 9.1 from a 8.2. Luckily, I have an extra ASA and I'm attempting to set that up from scratch using the new 8.3 + syntax. I have the 9.1 ASA setup the way I thought it should be using the ADSM but when I swap it in. I have no luck. When I go to do packet traces for on t1 interface for 139.55.206.124 port 443. I get (acl-drop) Flow is denied by configured rule, on output interface "np identity ifc". Any pushes in the right direction would be appreciated. 

 

I used the following video as a rough guide: https://supportforums.cisco.com/video/11929221/asa-enabling-port-forwarding-asdm-versions-83-and-84

 

The T1 - interface is my outside interface

inside, clients, servers, printers, executive - are all inside interfaces

 

 

Labels:
Preview file
24 KB
Preview file
24 KB
0 Helpful
10 Replies 10

meGunnett
Level 1
Level 1

‎05-24-2015 07:15 AM

A lot of the issue was in the ACL, I needed to use the Real IP not NAT or public ip. This seems to work for all my ip addresses other than the one shared with the ASA outside interface.

Any help would be appreciated. 

Also when I use Packet tracer, it says packet is dropped during Access-List, Output Interface "NP Identity Ifc"

Also I am also having issues pinging to the anything on the internet, though internet access seems to be working fine.

Preview file
24 KB
0 Helpful

meGunnett
Level 1
Level 1
In response to meGunnett

‎05-24-2015 09:48 AM

Here are some images.

Also I wanted to note that I cannot ping the outside world from a workstation connected to the ASA, though I'm able to reach the outside world.

Preview file
34 KB
Preview file
27 KB
Preview file
64 KB
0 Helpful

Andre Neethling
Level 4
Level 4
In response to meGunnett

‎05-25-2015 12:56 AM

Hi. This seems like it can be a NAT issue. What are your experiences after yopu changed all the ACL's to the real IP and not the NATTED IP?

Please post the output of "sh nat" on the firewall.

If you want to ping outside hosts, please add the inspect icmp option to the global Policy Map. See below:

policy-map global_policy
 class inspection_default
  inspect icmp

0 Helpful

meGunnett
Level 1
Level 1
In response to Andre Neethling

‎05-25-2015 05:10 AM

Using the Real IP's solved my issues for everything other than the IP that is shared with the ASA outside "t1" interface.

Even when I do a packet trace, I don't get any hits on the .124 which is the IP address, I'm having an issue with.

 

and: "sh nat"

Manual NAT Policies (Section 1)
1 (inside) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
2 (inside) to (t1) source dynamic any interface  
    translate_hits = 5400, untranslate_hits = 36
3 (servers) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
4 (servers) to (t1) source dynamic any interface  
    translate_hits = 1246, untranslate_hits = 2
5 (clients) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
6 (clients) to (t1) source dynamic any interface  
    translate_hits = 607, untranslate_hits = 3
7 (printers) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
8 (printers) to (t1) source dynamic any interface  
    translate_hits = 2, untranslate_hits = 0
9 (executive) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
10 (executive) to (t1) source dynamic any interface  
    translate_hits = 312, untranslate_hits = 2
11 (time-clocks) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
12 (time-clocks) to (t1) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
13 (guests) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
14 (guests) to (t1) source dynamic any interface  
    translate_hits = 96, untranslate_hits = 6

Auto NAT Policies (Section 2)
1 (inside) to (cable) source static cable-webfilter-interface 72.28.195.150   service tcp 8000 8000 
    translate_hits = 0, untranslate_hits = 0
2 (inside) to (cable) source static cable-webfilter-wsa 72.28.195.150   service tcp 8280 8280 
    translate_hits = 0, untranslate_hits = 0
3 (inside) to (t1) source static t1-webfilter-interface 139.55.206.125   service tcp 8000 8000 
    translate_hits = 0, untranslate_hits = 0
4 (inside) to (t1) source static t1-webfilter-wsa 139.55.206.125   service tcp 8280 8280 
    translate_hits = 0, untranslate_hits = 1
5 (inside) to (cable) source static cable-spamfilter-ssh interface   service tcp ssh ssh 
    translate_hits = 0, untranslate_hits = 0
6 (inside) to (cable) source static cable-spamfilter-http interface   service tcp www www 
    translate_hits = 0, untranslate_hits = 0
7 (inside) to (cable) source static cable-spamfilter-https interface   service tcp https https 
    translate_hits = 0, untranslate_hits = 0
8 (inside) to (cable) source static cable-spamfilter-interface interface   service tcp 8000 8000 
    translate_hits = 0, untranslate_hits = 0
9 (inside) to (cable) source static cable-spamfilter-ntp interface   service udp ntp ntp 
    translate_hits = 0, untranslate_hits = 0
10 (inside) to (cable) source static cable-spamfilter-smtp interface   service tcp smtp smtp 
    translate_hits = 0, untranslate_hits = 0
11 (inside) to (cable) source static cable-spamfilter-tcp-domain interface   service tcp domain domain 
    translate_hits = 0, untranslate_hits = 0
12 (inside) to (cable) source static cable-spamfilter-udp-domain interface   service udp domain domain 
    translate_hits = 0, untranslate_hits = 0
13 (inside) to (t1) source static t1-spamfilter-http interface   service tcp www www 
    translate_hits = 0, untranslate_hits = 0
14 (inside) to (t1) source static t1-spamfilter-https interface   service tcp https https 
    translate_hits = 0, untranslate_hits = 0
15 (inside) to (t1) source static t1-spamfilter-interface interface   service tcp 8000 8000 
    translate_hits = 0, untranslate_hits = 0
16 (inside) to (t1) source static t1-spamfilter-ntp interface   service udp ntp ntp 
    translate_hits = 0, untranslate_hits = 0
17 (inside) to (t1) source static t1-spamfilter-smtp interface   service tcp smtp smtp 
    translate_hits = 0, untranslate_hits = 0
18 (inside) to (t1) source static t1-spamfilter-ssh interface   service tcp ssh ssh 
    translate_hits = 0, untranslate_hits = 0
19 (inside) to (t1) source static t1-spamfilter-tcp-domain interface   service tcp domain domain 
    translate_hits = 0, untranslate_hits = 0
20 (inside) to (t1) source static t1-spamfilter-udp-domain interface   service udp domain domain 
    translate_hits = 0, untranslate_hits = 0
21 (servers) to (t1) source static cable-ftp 72.28.195.150   service tcp ftp ftp 
    translate_hits = 0, untranslate_hits = 0
22 (servers) to (t1) source static t1-ftp 139.55.206.125   service tcp ftp ftp 
    translate_hits = 0, untranslate_hits = 1
23 (servers) to (cable) source static cable-citrix-http 72.28.195.148   service tcp www www 
    translate_hits = 0, untranslate_hits = 0
24 (servers) to (cable) source static cable-citrix-https 72.28.195.148   service tcp https https 
    translate_hits = 0, untranslate_hits = 0
25 (servers) to (cable) source static cable-citrix-ica1 72.28.195.148   service tcp citrix-ica citrix-ica 
    translate_hits = 0, untranslate_hits = 0
26 (servers) to (cable) source static cable-citrix-ica2 72.28.195.148   service tcp 2598 2598 
    translate_hits = 0, untranslate_hits = 0
27 (servers) to (cable) source static cable-citrix-ica3 72.28.195.148   service tcp 2599 2599 
    translate_hits = 0, untranslate_hits = 0
28 (servers) to (cable) source static cable-citrix-ica4 72.28.195.148   service tcp 2600 2600 
    translate_hits = 0, untranslate_hits = 0
29 (servers) to (cable) source static cable-citrix-ica5 72.28.195.148   service tcp 2601 2601 
    translate_hits = 0, untranslate_hits = 0
30 (servers) to (cable) source static cable-eset-1 72.28.195.150   service tcp 2222 2222 
    translate_hits = 0, untranslate_hits = 0
31 (servers) to (t1) source static t1-citrix-http 139.55.206.123   service tcp www www 
    translate_hits = 0, untranslate_hits = 0
32 (servers) to (t1) source static t1-citrix-https 139.55.206.123   service tcp https https 
    translate_hits = 0, untranslate_hits = 3
33 (servers) to (t1) source static t1-citrix-ica1 139.55.206.123   service tcp citrix-ica citrix-ica 
    translate_hits = 0, untranslate_hits = 0
34 (servers) to (t1) source static t1-citrix-ica2 139.55.206.123   service tcp 2598 2598 
    translate_hits = 0, untranslate_hits = 0
35 (servers) to (cable) source static t1-citrix-ica3 139.55.206.123   service tcp 2599 2599 
    translate_hits = 0, untranslate_hits = 0
36 (servers) to (t1) source static t1-citrix-ica4 139.55.206.123   service tcp 2600 2600 
    translate_hits = 0, untranslate_hits = 0
37 (servers) to (t1) source static t1-citrix-ica5 139.55.206.123   service tcp 2601 2601 
    translate_hits = 0, untranslate_hits = 0
38 (servers) to (cable) source static cable-eset-2 72.28.195.150   service tcp 2224 2224 
    translate_hits = 0, untranslate_hits = 0
39 (servers) to (t1) source static t1-eset-1 139.55.206.125   service tcp 2222 2222 
    translate_hits = 0, untranslate_hits = 33
40 (servers) to (t1) source static t1-eset-2 139.55.206.125   service tcp 2224 2224 
    translate_hits = 0, untranslate_hits = 0
41 (servers) to (cable) source static cable-archiver-http 72.28.195.151   service tcp www www 
    translate_hits = 0, untranslate_hits = 0
42 (servers) to (cable) source static cable-archiver-https 139.55.206.126   service tcp https https 
    translate_hits = 0, untranslate_hits = 0
43 (servers) to (cable) source static cable-archiver-interface 72.28.195.151   service tcp 8000 8000 
    translate_hits = 0, untranslate_hits = 0
44 (servers) to (cable) source static cable-archiver-ntp 72.28.195.151   service udp ntp ntp 
    translate_hits = 0, untranslate_hits = 0
45 (servers) to (cable) source static cable-archiver-ssh 72.28.195.151   service tcp ssh ssh 
    translate_hits = 0, untranslate_hits = 0
46 (servers) to (cable) source static cable-archiver-tcp-domain 72.28.195.151   service tcp domain domain 
    translate_hits = 0, untranslate_hits = 0
47 (servers) to (cable) source static cable-archiver-udp-domain 72.28.195.151   service udp domain domain 
    translate_hits = 0, untranslate_hits = 0
48 (servers) to (t1) source static t1-archiver-http 139.55.206.126   service tcp www www 
    translate_hits = 0, untranslate_hits = 0
49 (servers) to (t1) source static t1-archiver-https 139.55.206.126   service tcp https https 
    translate_hits = 0, untranslate_hits = 2
50 (servers) to (t1) source static t1-archiver-interface 139.55.206.126   service tcp 8000 8000 
    translate_hits = 0, untranslate_hits = 0
51 (servers) to (t1) source static t1-archiver-ntp 139.55.206.126   service udp ntp ntp 
    translate_hits = 0, untranslate_hits = 0
52 (servers) to (t1) source static t1-archiver-ssh 139.55.206.126   service tcp ssh ssh 
    translate_hits = 0, untranslate_hits = 4
53 (servers) to (t1) source static t1-archiver-tcp-domain 139.55.206.126   service tcp domain domain 
    translate_hits = 0, untranslate_hits = 0
54 (servers) to (t1) source static t1-archiver-udp-domain 139.55.206.126   service udp domain domain 
    translate_hits = 0, untranslate_hits = 0

Preview file
24 KB
0 Helpful

meGunnett
Level 1
Level 1
In response to meGunnett

‎05-25-2015 06:07 AM

Here is the sh NAT from the ASA running 8.2.5

 

Result of the command: "sh nat"

NAT policies on Interface inside:
  match ip inside 192.168.0.0 255.255.255.0 inside vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside any inside vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 inside 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 inside 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 inside 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside host lsf-ctx inside 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 inside 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 inside 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 inside 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 inside 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 servers vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside any servers vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 servers 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 servers 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 servers 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside host lsf-ctx servers 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 servers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 94652, untranslate_hits = 791308
  match ip inside 192.168.0.0 255.255.255.0 servers 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 servers 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 servers 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 clients vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside any clients vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 clients 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 clients 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 clients 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 55462, untranslate_hits = 651549
  match ip inside host lsf-ctx clients 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 clients 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 clients 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 clients 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 clients 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 printers vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside any printers vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 printers 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 printers 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 7890, untranslate_hits = 5524
  match ip inside 192.168.0.0 255.255.255.0 printers 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside host lsf-ctx printers 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 printers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 printers 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 printers 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 printers 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 executive vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside any executive vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 executive 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 10117, untranslate_hits = 202357
  match ip inside 192.168.0.0 255.255.255.0 executive 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 executive 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside host lsf-ctx executive 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 executive 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 executive 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 executive 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 executive 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 time-clocks vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside any time-clocks vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 time-clocks 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 time-clocks 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 time-clocks 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside host lsf-ctx time-clocks 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 time-clocks 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 time-clocks 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 time-clocks 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 time-clocks 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 guests vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside any guests vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 guests 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 guests 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 guests 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside host lsf-ctx guests 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 guests 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 guests 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 guests 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 guests 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 t1 vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 2, untranslate_hits = 0
  match ip inside any t1 vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 t1 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 t1 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 t1 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside host lsf-ctx t1 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 t1 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 t1 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 t1 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 t1 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-m vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside any hv-m vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-m 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-m 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-m 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside host lsf-ctx hv-m 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-m 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-m 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 2712, untranslate_hits = 19142
  match ip inside 192.168.0.0 255.255.255.0 hv-m 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-m 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-lm vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside any hv-lm vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-lm 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-lm 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-lm 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside host lsf-ctx hv-lm 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-lm 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-lm 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-lm 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-lm 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-ct vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside any hv-ct vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-ct 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-ct 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-ct 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside host lsf-ctx hv-ct 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-ct 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-ct 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-ct 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-ct 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 cable vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside any cable vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 cable 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 cable 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 cable 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside host lsf-ctx cable 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 cable 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 cable 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 cable 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 cable 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 _internal_loopback vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside any _internal_loopback vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 _internal_loopback 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 _internal_loopback 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 _internal_loopback 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside host lsf-ctx _internal_loopback 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 _internal_loopback 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 _internal_loopback 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 _internal_loopback 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 _internal_loopback 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match tcp inside host spamfilter eq 25 t1 any
    static translation to 139.55.206.124/25
    translate_hits = 7, untranslate_hits = 17593
  match tcp inside host spamfilter eq 25 cable any
    static translation to 72.28.195.149/25
    translate_hits = 0, untranslate_hits = 0
  match tcp inside host spamfilter eq 80 t1 any
    static translation to 139.55.206.124/80
    translate_hits = 1, untranslate_hits = 3242
  match tcp inside host spamfilter eq 80 cable any
    static translation to 72.28.195.149/80
    translate_hits = 0, untranslate_hits = 0
  match tcp inside host spamfilter eq 443 t1 any
    static translation to 139.55.206.124/443
    translate_hits = 173, untranslate_hits = 222377
  match tcp inside host spamfilter eq 443 cable any
    static translation to 72.28.195.149/443
    translate_hits = 0, untranslate_hits = 0
  match tcp inside host spamfilter eq 22 t1 any
    static translation to 139.55.206.124/22
    translate_hits = 0, untranslate_hits = 660
  match tcp inside host spamfilter eq 22 cable any
    static translation to 72.28.195.149/22
    translate_hits = 0, untranslate_hits = 0
  match tcp inside host spamfilter eq 53 t1 any
    static translation to 139.55.206.124/53
    translate_hits = 0, untranslate_hits = 11
  match tcp inside host spamfilter eq 53 cable any
    static translation to 72.28.195.149/53
    translate_hits = 0, untranslate_hits = 0
  match udp inside host spamfilter eq 53 t1 any
    static translation to 139.55.206.124/53
    translate_hits = 0, untranslate_hits = 75
  match udp inside host spamfilter eq 53 cable any
    static translation to 72.28.195.149/53
    translate_hits = 0, untranslate_hits = 0
  match udp inside host spamfilter eq 123 t1 any
    static translation to 139.55.206.124/123
    translate_hits = 1160, untranslate_hits = 140
  match udp inside host spamfilter eq 123 cable any
    static translation to 72.28.195.149/123
    translate_hits = 0, untranslate_hits = 0
  match tcp inside host spamfilter eq 8000 t1 any
    static translation to 139.55.206.124/8000
    translate_hits = 3, untranslate_hits = 114
  match tcp inside host spamfilter eq 8000 cable any
    static translation to 72.28.195.149/8000
    translate_hits = 0, untranslate_hits = 0
  match tcp inside host webfilter eq 8000 t1 any
    static translation to 139.55.206.125/8000
    translate_hits = 2, untranslate_hits = 2663
  match tcp inside host webfilter eq 8000 cable any
    static translation to 72.28.195.150/8000
    translate_hits = 0, untranslate_hits = 0
  match tcp inside host webfilter eq 8280 cable any
    static translation to 72.28.195.150/8280
    translate_hits = 0, untranslate_hits = 0
  match tcp inside host webfilter eq 8280 t1 any
    static translation to 139.55.206.125/8280
    translate_hits = 7, untranslate_hits = 6900
  match ip inside 192.168.0.0 255.255.255.0 inside any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 servers any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 clients any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 printers any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 executive any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 time-clocks any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 guests any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 1025, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 t1 any
    dynamic translation to pool 1 (139.55.206.124 [Interface PAT])
    translate_hits = 1420875, untranslate_hits = 18832
  match ip inside 192.168.0.0 255.255.255.0 hv-m any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-lm any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 hv-ct any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 cable any
    dynamic translation to pool 1 (72.28.195.149 [Interface PAT])
    translate_hits = 0, untranslate_hits = 0
  match ip inside 192.168.0.0 255.255.255.0 _internal_loopback any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0

NAT policies on Interface servers:
  match ip servers 192.168.2.0 255.255.255.0 inside 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 inside 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 inside 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 791415, untranslate_hits = 94646
  match ip servers 192.168.2.0 255.255.255.0 inside 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 inside 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers any inside vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 inside 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 inside 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 inside 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 servers 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 servers 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 servers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 servers 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 servers 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers any servers vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 servers 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 servers 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 servers 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 clients 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 86277, untranslate_hits = 240560
  match ip servers 192.168.2.0 255.255.255.0 clients 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 clients 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 clients 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 clients 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers any clients vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 clients 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 clients 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 clients 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 printers 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 printers 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 printers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 printers 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 4799, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 printers 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers any printers vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 printers 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 printers 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 printers 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 executive 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 executive 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 21, untranslate_hits = 9845
  match ip servers 192.168.2.0 255.255.255.0 executive 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 executive 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 executive 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers any executive vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 executive 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 executive 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 executive 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 time-clocks 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 time-clocks 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 time-clocks 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 time-clocks 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 time-clocks 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers any time-clocks vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 time-clocks 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 time-clocks 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 time-clocks 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 guests 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 guests 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 guests 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 guests 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 guests 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers any guests vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 guests 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 guests 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 guests 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 t1 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 t1 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 t1 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 t1 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 t1 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers any t1 vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 t1 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 t1 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 t1 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-m 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-m 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-m 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-m 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-m 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers any hv-m vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-m 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 31, untranslate_hits = 16761
  match ip servers 192.168.2.0 255.255.255.0 hv-m 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-m 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-lm 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-lm 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-lm 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-lm 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-lm 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers any hv-lm vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-lm 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-lm 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-lm 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-ct 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-ct 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-ct 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-ct 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-ct 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers any hv-ct vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-ct 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-ct 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-ct 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 cable 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 cable 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 cable 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 cable 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 cable 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers any cable vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 cable 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 cable 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 cable 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 _internal_loopback 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 _internal_loopback 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 _internal_loopback 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 _internal_loopback 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 _internal_loopback 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers any _internal_loopback vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 _internal_loopback 192.168.101.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 _internal_loopback 192.168.102.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 _internal_loopback 192.168.103.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host archiver eq 443 t1 any
    static translation to 139.55.206.126/443
    translate_hits = 56, untranslate_hits = 6866
  match tcp servers host archiver eq 443 cable any
    static translation to 72.28.195.151/443
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host archiver eq 8000 t1 any
    static translation to 139.55.206.126/8000
    translate_hits = 6, untranslate_hits = 4096
  match tcp servers host archiver eq 8000 cable any
    static translation to 72.28.195.151/8000
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host archiver eq 53 t1 any
    static translation to 139.55.206.126/53
    translate_hits = 0, untranslate_hits = 14
  match tcp servers host archiver eq 53 cable any
    static translation to 72.28.195.151/53
    translate_hits = 0, untranslate_hits = 0
  match udp servers host archiver eq 53 t1 any
    static translation to 139.55.206.126/53
    translate_hits = 0, untranslate_hits = 72
  match udp servers host archiver eq 53 cable any
    static translation to 72.28.195.151/53
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host archiver eq 22 t1 any
    static translation to 139.55.206.126/22
    translate_hits = 0, untranslate_hits = 843
  match tcp servers host archiver eq 22 cable any
    static translation to 72.28.195.151/22
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host archiver eq 80 t1 any
    static translation to 139.55.206.126/80
    translate_hits = 0, untranslate_hits = 231
  match tcp servers host archiver eq 80 cable any
    static translation to 72.28.195.151/80
    translate_hits = 0, untranslate_hits = 0
  match udp servers host archiver eq 123 t1 any
    static translation to 139.55.206.126/123
    translate_hits = 1159, untranslate_hits = 140
  match udp servers host archiver eq 123 cable any
    static translation to 72.28.195.151/123
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host lsf-ctx eq 80 t1 any
    static translation to 139.55.206.123/80
    translate_hits = 3, untranslate_hits = 6876
  match tcp servers host lsf-ctx eq 80 cable any
    static translation to 72.28.195.148/80
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host lsf-ctx eq 443 t1 any
    static translation to 139.55.206.123/443
    translate_hits = 4, untranslate_hits = 6880
  match tcp servers host lsf-ctx eq 443 cable any
    static translation to 72.28.195.148/443
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host lsf-ctx eq 1494 t1 any
    static translation to 139.55.206.123/1494
    translate_hits = 0, untranslate_hits = 19
  match tcp servers host lsf-ctx eq 1494 cable any
    static translation to 72.28.195.148/1494
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host lsf-ctx eq 2598 t1 any
    static translation to 139.55.206.123/2598
    translate_hits = 0, untranslate_hits = 30
  match tcp servers host lsf-ctx eq 2598 cable any
    static translation to 72.28.195.148/2598
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host lsf-ctx eq 2599 t1 any
    static translation to 139.55.206.123/2599
    translate_hits = 0, untranslate_hits = 30
  match tcp servers host lsf-ctx eq 2599 cable any
    static translation to 72.28.195.148/2599
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host lsf-ctx eq 2600 t1 any
    static translation to 139.55.206.123/2600
    translate_hits = 0, untranslate_hits = 30
  match tcp servers host lsf-ctx eq 2600 cable any
    static translation to 72.28.195.148/2600
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host lsf-ctx eq 2601 t1 any
    static translation to 139.55.206.123/2601
    translate_hits = 0, untranslate_hits = 31
  match tcp servers host lsf-ctx eq 2601 cable any
    static translation to 72.28.195.148/2601
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host lsf-eset eq 2222 t1 any
    static translation to 139.55.206.125/2222
    translate_hits = 0, untranslate_hits = 11835
  match tcp servers host lsf-eset eq 2222 cable any
    static translation to 72.28.195.150/2222
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host lsf-eset eq 2224 t1 any
    static translation to 139.55.206.125/2224
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host lsf-eset eq 2224 cable any
    static translation to 72.28.195.150/2224
    translate_hits = 0, untranslate_hits = 0
  match tcp servers host lsf-ftp eq 21 t1 any
    static translation to 139.55.206.125/21
    translate_hits = 5, untranslate_hits = 750
  match tcp servers host lsf-ftp eq 21 cable any
    static translation to 72.28.195.150/21
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 inside any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 servers any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 clients any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 printers any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 executive any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 time-clocks any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 guests any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 t1 any
    dynamic translation to pool 1 (139.55.206.124 [Interface PAT])
    translate_hits = 196065, untranslate_hits = 2162
  match ip servers 192.168.2.0 255.255.255.0 hv-m any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-lm any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 hv-ct any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 cable any
    dynamic translation to pool 1 (72.28.195.149 [Interface PAT])
    translate_hits = 0, untranslate_hits = 0
  match ip servers 192.168.2.0 255.255.255.0 _internal_loopback any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0

NAT policies on Interface clients:
  match ip clients 192.168.3.0 255.255.255.0 inside 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 inside 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 inside 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 654631, untranslate_hits = 55386
  match ip clients any inside vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 inside 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 servers 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 servers 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 servers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients any servers vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 servers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 240560, untranslate_hits = 86277
  match ip clients 192.168.3.0 255.255.255.0 clients 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 clients 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 clients 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients any clients vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 clients 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 printers 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 103325, untranslate_hits = 19297
  match ip clients 192.168.3.0 255.255.255.0 printers 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 printers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients any printers vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 printers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 executive 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 executive 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 244, untranslate_hits = 6
  match ip clients 192.168.3.0 255.255.255.0 executive 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients any executive vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 executive 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 time-clocks 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 time-clocks 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 time-clocks 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients any time-clocks vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 time-clocks 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 guests 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 guests 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 guests 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients any guests vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 guests 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 t1 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 t1 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 t1 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients any t1 vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 t1 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-m 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-m 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-m 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients any hv-m vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-m 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-lm 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-lm 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-lm 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients any hv-lm vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-lm 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-ct 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-ct 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-ct 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients any hv-ct vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-ct 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 cable 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 cable 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 cable 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients any cable vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 cable 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 _internal_loopback 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 _internal_loopback 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 _internal_loopback 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients any _internal_loopback vpnpool 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 _internal_loopback 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 inside any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 servers any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 clients any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 printers any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 executive any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 time-clocks any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 guests any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 t1 any
    dynamic translation to pool 1 (139.55.206.124 [Interface PAT])
    translate_hits = 346765, untranslate_hits = 28121
  match ip clients 192.168.3.0 255.255.255.0 hv-m any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-lm any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 hv-ct any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 cable any
    dynamic translation to pool 1 (72.28.195.149 [Interface PAT])
    translate_hits = 0, untranslate_hits = 0
  match ip clients 192.168.3.0 255.255.255.0 _internal_loopback any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0

NAT policies on Interface printers:
  match ip printers 192.168.4.0 255.255.255.0 inside 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 inside 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 inside 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 41151, untranslate_hits = 7890
  match ip printers 192.168.4.0 255.255.255.0 inside 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 servers 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 servers 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 servers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 servers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 4799
  match ip printers 192.168.4.0 255.255.255.0 clients 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 19297, untranslate_hits = 103325
  match ip printers 192.168.4.0 255.255.255.0 clients 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 clients 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 clients 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 printers 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 printers 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 printers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 printers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 executive 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 executive 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 1, untranslate_hits = 33807
  match ip printers 192.168.4.0 255.255.255.0 executive 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 executive 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 time-clocks 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 time-clocks 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 time-clocks 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 time-clocks 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 guests 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 guests 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 guests 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 guests 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 t1 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 t1 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 t1 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 t1 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-m 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-m 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-m 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-m 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-lm 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-lm 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-lm 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-lm 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-ct 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-ct 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-ct 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-ct 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 cable 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 cable 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 cable 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 cable 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 _internal_loopback 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 _internal_loopback 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 _internal_loopback 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 _internal_loopback 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 inside any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 servers any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 clients any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 printers any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 executive any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 time-clocks any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 guests any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 t1 any
    dynamic translation to pool 1 (139.55.206.124 [Interface PAT])
    translate_hits = 352, untranslate_hits = 4
  match ip printers 192.168.4.0 255.255.255.0 hv-m any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-lm any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 hv-ct any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 cable any
    dynamic translation to pool 1 (72.28.195.149 [Interface PAT])
    translate_hits = 0, untranslate_hits = 0
  match ip printers 192.168.4.0 255.255.255.0 _internal_loopback any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0

NAT policies on Interface executive:
  match ip executive 192.168.5.0 255.255.255.0 inside 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 inside 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 inside 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 206628, untranslate_hits = 10004
  match ip executive 192.168.5.0 255.255.255.0 inside 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 inside 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 servers 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 servers 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 servers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 servers 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 servers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 9845, untranslate_hits = 21
  match ip executive 192.168.5.0 255.255.255.0 clients 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 clients 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 15, untranslate_hits = 244
  match ip executive 192.168.5.0 255.255.255.0 clients 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 clients 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 clients 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 printers 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 33819, untranslate_hits = 1
  match ip executive 192.168.5.0 255.255.255.0 printers 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 printers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 printers 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 printers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 executive 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 executive 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 executive 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 executive 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 executive 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 time-clocks 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 time-clocks 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 time-clocks 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 time-clocks 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 45, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 time-clocks 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 guests 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 guests 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 guests 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 guests 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 guests 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 t1 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 t1 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 t1 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 t1 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 t1 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-m 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-m 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-m 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-m 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-m 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-lm 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-lm 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-lm 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-lm 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-lm 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-ct 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-ct 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-ct 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-ct 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-ct 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 cable 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 cable 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 cable 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 cable 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 cable 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 _internal_loopback 192.168.4.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 _internal_loopback 192.168.3.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 _internal_loopback 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 _internal_loopback 192.168.6.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 _internal_loopback 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 inside any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 servers any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 clients any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 printers any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 executive any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 time-clocks any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 guests any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 8, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 t1 any
    dynamic translation to pool 1 (139.55.206.124 [Interface PAT])
    translate_hits = 106027, untranslate_hits = 15497
  match ip executive 192.168.5.0 255.255.255.0 hv-m any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-lm any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 hv-ct any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 cable any
    dynamic translation to pool 1 (72.28.195.149 [Interface PAT])
    translate_hits = 0, untranslate_hits = 0
  match ip executive 192.168.5.0 255.255.255.0 _internal_loopback any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0

NAT policies on Interface time-clocks:
  match ip time-clocks 192.168.6.0 255.255.255.0 inside 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 inside host lsf-ctx
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 inside 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 servers 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 servers host lsf-ctx
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 servers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 clients 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 clients host lsf-ctx
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 clients 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 printers 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 printers host lsf-ctx
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 printers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 executive 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 45
  match ip time-clocks 192.168.6.0 255.255.255.0 executive host lsf-ctx
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 executive 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 time-clocks 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 time-clocks host lsf-ctx
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 time-clocks 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 guests 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 guests host lsf-ctx
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 guests 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 t1 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 t1 host lsf-ctx
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 t1 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 hv-m 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 hv-m host lsf-ctx
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 hv-m 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 hv-lm 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 hv-lm host lsf-ctx
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 hv-lm 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 hv-ct 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 hv-ct host lsf-ctx
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 hv-ct 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 cable 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 cable host lsf-ctx
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 cable 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 _internal_loopback 192.168.5.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 _internal_loopback host lsf-ctx
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip time-clocks 192.168.6.0 255.255.255.0 _internal_loopback 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0

NAT policies on Interface guests:
  match ip guests 10.10.10.0 255.255.255.0 guests any
    dynamic translation to pool 1 (No matching global)
    translate_hits = 0, untranslate_hits = 0
  match ip guests 10.10.10.0 255.255.255.0 t1 any
    dynamic translation to pool 1 (139.55.206.124 [Interface PAT])
    translate_hits = 159799, untranslate_hits = 17220
  match ip guests 10.10.10.0 255.255.255.0 cable any
    dynamic translation to pool 1 (72.28.195.149 [Interface PAT])
    translate_hits = 0, untranslate_hits = 0

NAT policies on Interface hv-m:
  match ip hv-m 192.168.101.0 255.255.255.0 inside 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 19177, untranslate_hits = 2710
  match ip hv-m 192.168.101.0 255.255.255.0 inside 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 servers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 servers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 16761, untranslate_hits = 31
  match ip hv-m 192.168.101.0 255.255.255.0 clients 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 clients 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 printers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 printers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 executive 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 executive 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 time-clocks 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 time-clocks 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 guests 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 guests 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 t1 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 t1 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 hv-m 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 hv-m 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 hv-lm 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 hv-lm 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 hv-ct 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 hv-ct 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 cable 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 cable 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 _internal_loopback 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-m 192.168.101.0 255.255.255.0 _internal_loopback 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0

NAT policies on Interface hv-lm:
  match ip hv-lm 192.168.102.0 255.255.255.0 inside 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 inside 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 servers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 servers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 clients 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 clients 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 printers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 printers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 executive 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 executive 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 time-clocks 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 time-clocks 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 guests 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 guests 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 t1 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 t1 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 hv-m 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 hv-m 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 hv-lm 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 hv-lm 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 hv-ct 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 hv-ct 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 cable 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 cable 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 _internal_loopback 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-lm 192.168.102.0 255.255.255.0 _internal_loopback 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0

NAT policies on Interface hv-ct:
  match ip hv-ct 192.168.103.0 255.255.255.0 inside 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 inside 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 servers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 servers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 clients 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 clients 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 printers 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 printers 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 executive 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 executive 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 time-clocks 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 time-clocks 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 guests 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 guests 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 t1 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 t1 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 hv-m 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 hv-m 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 hv-lm 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 hv-lm 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 hv-ct 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 hv-ct 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 cable 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 cable 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 _internal_loopback 192.168.0.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0
  match ip hv-ct 192.168.103.0 255.255.255.0 _internal_loopback 192.168.2.0 255.255.255.0
    NAT exempt
    translate_hits = 0, untranslate_hits = 0

0 Helpful

Andre Neethling
Level 4
Level 4
In response to meGunnett

‎05-25-2015 06:11 AM

Please post the output of "sh nat" on the firewall.

0 Helpful

meGunnett
Level 1
Level 1
In response to Andre Neethling

‎05-25-2015 06:19 AM

Result of the command: "sh NAT"

Manual NAT Policies (Section 1)
1 (inside) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
2 (inside) to (t1) source dynamic any interface  
    translate_hits = 7349, untranslate_hits = 59
3 (servers) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
4 (servers) to (t1) source dynamic any interface  
    translate_hits = 1824, untranslate_hits = 8
5 (clients) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
6 (clients) to (t1) source dynamic any interface  
    translate_hits = 915, untranslate_hits = 5
7 (printers) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
8 (printers) to (t1) source dynamic any interface  
    translate_hits = 3, untranslate_hits = 0
9 (executive) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
10 (executive) to (t1) source dynamic any interface  
    translate_hits = 441, untranslate_hits = 2
11 (time-clocks) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
12 (time-clocks) to (t1) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
13 (guests) to (cable) source dynamic any interface  
    translate_hits = 0, untranslate_hits = 0
14 (guests) to (t1) source dynamic any interface  
    translate_hits = 102, untranslate_hits = 6

Auto NAT Policies (Section 2)
1 (inside) to (cable) source static cable-webfilter-interface 72.28.195.150   service tcp 8000 8000 
    translate_hits = 0, untranslate_hits = 0
2 (inside) to (cable) source static cable-webfilter-wsa 72.28.195.150   service tcp 8280 8280 
    translate_hits = 0, untranslate_hits = 0
3 (inside) to (t1) source static t1-webfilter-interface 139.55.206.125   service tcp 8000 8000 
    translate_hits = 0, untranslate_hits = 0
4 (inside) to (t1) source static t1-webfilter-wsa 139.55.206.125   service tcp 8280 8280 
    translate_hits = 0, untranslate_hits = 1
5 (inside) to (cable) source static cable-spamfilter-ssh interface   service tcp ssh ssh 
    translate_hits = 0, untranslate_hits = 0
6 (inside) to (cable) source static cable-spamfilter-http interface   service tcp www www 
    translate_hits = 0, untranslate_hits = 0
7 (inside) to (cable) source static cable-spamfilter-https interface   service tcp https https 
    translate_hits = 0, untranslate_hits = 0
8 (inside) to (cable) source static cable-spamfilter-interface interface   service tcp 8000 8000 
    translate_hits = 0, untranslate_hits = 0
9 (inside) to (cable) source static cable-spamfilter-ntp interface   service udp ntp ntp 
    translate_hits = 0, untranslate_hits = 0
10 (inside) to (cable) source static cable-spamfilter-smtp interface   service tcp smtp smtp 
    translate_hits = 0, untranslate_hits = 0
11 (inside) to (cable) source static cable-spamfilter-tcp-domain interface   service tcp domain domain 
    translate_hits = 0, untranslate_hits = 0
12 (inside) to (cable) source static cable-spamfilter-udp-domain interface   service udp domain domain 
    translate_hits = 0, untranslate_hits = 0
13 (inside) to (t1) source static t1-spamfilter-http interface   service tcp www www 
    translate_hits = 0, untranslate_hits = 0
14 (inside) to (t1) source static t1-spamfilter-https interface   service tcp https https 
    translate_hits = 0, untranslate_hits = 0
15 (inside) to (t1) source static t1-spamfilter-interface interface   service tcp 8000 8000 
    translate_hits = 0, untranslate_hits = 0
16 (inside) to (t1) source static t1-spamfilter-ntp interface   service udp ntp ntp 
    translate_hits = 0, untranslate_hits = 0
17 (inside) to (t1) source static t1-spamfilter-smtp interface   service tcp smtp smtp 
    translate_hits = 0, untranslate_hits = 0
18 (inside) to (t1) source static t1-spamfilter-ssh interface   service tcp ssh ssh 
    translate_hits = 0, untranslate_hits = 0
19 (inside) to (t1) source static t1-spamfilter-tcp-domain interface   service tcp domain domain 
    translate_hits = 0, untranslate_hits = 0
20 (inside) to (t1) source static t1-spamfilter-udp-domain interface   service udp domain domain 
    translate_hits = 0, untranslate_hits = 0
21 (servers) to (t1) source static cable-ftp 72.28.195.150   service tcp ftp ftp 
    translate_hits = 0, untranslate_hits = 0
22 (servers) to (t1) source static t1-ftp 139.55.206.125   service tcp ftp ftp 
    translate_hits = 0, untranslate_hits = 1
23 (servers) to (cable) source static cable-citrix-http 72.28.195.148   service tcp www www 
    translate_hits = 0, untranslate_hits = 0
24 (servers) to (cable) source static cable-citrix-https 72.28.195.148   service tcp https https 
    translate_hits = 0, untranslate_hits = 0
25 (servers) to (cable) source static cable-citrix-ica1 72.28.195.148   service tcp citrix-ica citrix-ica 
    translate_hits = 0, untranslate_hits = 0
26 (servers) to (cable) source static cable-citrix-ica2 72.28.195.148   service tcp 2598 2598 
    translate_hits = 0, untranslate_hits = 0
27 (servers) to (cable) source static cable-citrix-ica3 72.28.195.148   service tcp 2599 2599 
    translate_hits = 0, untranslate_hits = 0
28 (servers) to (cable) source static cable-citrix-ica4 72.28.195.148   service tcp 2600 2600 
    translate_hits = 0, untranslate_hits = 0
29 (servers) to (cable) source static cable-citrix-ica5 72.28.195.148   service tcp 2601 2601 
    translate_hits = 0, untranslate_hits = 0
30 (servers) to (cable) source static cable-eset-1 72.28.195.150   service tcp 2222 2222 
    translate_hits = 0, untranslate_hits = 0
31 (servers) to (t1) source static t1-citrix-http 139.55.206.123   service tcp www www 
    translate_hits = 0, untranslate_hits = 5
32 (servers) to (t1) source static t1-citrix-https 139.55.206.123   service tcp https https 
    translate_hits = 0, untranslate_hits = 3
33 (servers) to (t1) source static t1-citrix-ica1 139.55.206.123   service tcp citrix-ica citrix-ica 
    translate_hits = 0, untranslate_hits = 0
34 (servers) to (t1) source static t1-citrix-ica2 139.55.206.123   service tcp 2598 2598 
    translate_hits = 0, untranslate_hits = 0
35 (servers) to (cable) source static t1-citrix-ica3 139.55.206.123   service tcp 2599 2599 
    translate_hits = 0, untranslate_hits = 0
36 (servers) to (t1) source static t1-citrix-ica4 139.55.206.123   service tcp 2600 2600 
    translate_hits = 0, untranslate_hits = 0
37 (servers) to (t1) source static t1-citrix-ica5 139.55.206.123   service tcp 2601 2601 
    translate_hits = 0, untranslate_hits = 0
38 (servers) to (cable) source static cable-eset-2 72.28.195.150   service tcp 2224 2224 
    translate_hits = 0, untranslate_hits = 0
39 (servers) to (t1) source static t1-eset-1 139.55.206.125   service tcp 2222 2222 
    translate_hits = 0, untranslate_hits = 47
40 (servers) to (t1) source static t1-eset-2 139.55.206.125   service tcp 2224 2224 
    translate_hits = 0, untranslate_hits = 0
41 (servers) to (cable) source static cable-archiver-http 72.28.195.151   service tcp www www 
    translate_hits = 0, untranslate_hits = 0
42 (servers) to (cable) source static cable-archiver-https 139.55.206.126   service tcp https https 
    translate_hits = 0, untranslate_hits = 0
43 (servers) to (cable) source static cable-archiver-interface 72.28.195.151   service tcp 8000 8000 
    translate_hits = 0, untranslate_hits = 0
44 (servers) to (cable) source static cable-archiver-ntp 72.28.195.151   service udp ntp ntp 
    translate_hits = 0, untranslate_hits = 0
45 (servers) to (cable) source static cable-archiver-ssh 72.28.195.151   service tcp ssh ssh 
    translate_hits = 0, untranslate_hits = 0
46 (servers) to (cable) source static cable-archiver-tcp-domain 72.28.195.151   service tcp domain domain 
    translate_hits = 0, untranslate_hits = 0
47 (servers) to (cable) source static cable-archiver-udp-domain 72.28.195.151   service udp domain domain 
    translate_hits = 0, untranslate_hits = 0
48 (servers) to (t1) source static t1-archiver-http 139.55.206.126   service tcp www www 
    translate_hits = 0, untranslate_hits = 1
49 (servers) to (t1) source static t1-archiver-https 139.55.206.126   service tcp https https 
    translate_hits = 0, untranslate_hits = 2
50 (servers) to (t1) source static t1-archiver-interface 139.55.206.126   service tcp 8000 8000 
    translate_hits = 0, untranslate_hits = 0
51 (servers) to (t1) source static t1-archiver-ntp 139.55.206.126   service udp ntp ntp 
    translate_hits = 0, untranslate_hits = 1
52 (servers) to (t1) source static t1-archiver-ssh 139.55.206.126   service tcp ssh ssh 
    translate_hits = 0, untranslate_hits = 9
53 (servers) to (t1) source static t1-archiver-tcp-domain 139.55.206.126   service tcp domain domain 
    translate_hits = 0, untranslate_hits = 0
54 (servers) to (t1) source static t1-archiver-udp-domain 139.55.206.126   service udp domain domain 
    translate_hits = 0, untranslate_hits = 0

0 Helpful

meGunnett
Level 1
Level 1
In response to meGunnett

‎05-25-2015 05:28 PM

I solved the problem it was the order of the NAT rules.

0 Helpful

Andre Neethling
Level 4
Level 4
In response to meGunnett

‎05-25-2015 10:46 PM

I was just about to ask you to move that rule that is failing for .124 up into section 1. I never saw this reply. Also I think we're in different timezones........... :-)

0 Helpful

meGunnett
Level 1
Level 1
In response to Andre Neethling

‎05-25-2015 05:40 AM

I have included several packet traces.

Outside to inside on .124 (problem ip shared with outside inteface)

Outside to inside on .123 (working fine)

Inside to outside on .124 (problem)

Inside to outside on .123 (working fine)

Preview file
2 KB
Preview file
2 KB
Preview file
1 KB
Preview file
1 KB
0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card