01-25-2018 06:42 AM - edited 02-21-2020 07:12 AM
I am facing some NAT issue on old asa 8.2.5. Running configuration is attached in this post. I was run "Packet-tracer" and found following below issue-
Phase: 6
Type: NAT
Subtype:
Result: DROP
Config:
nat (INSIDE) 1 0.0.0.0 0.0.0.0
match ip INSIDE any OUTSIDE any
dynamic translation to pool 1 (20.20.40.2 [Interface PAT])
translate_hits = 757, untranslate_hits = 0
Additional Information:
Forward Flow based lookup yields rule:
in id=0xc9654758, priority=1, domain=nat, deny=false
hits=43113, user_data=0xc9654698, cs_id=0x0, flags=0x0, protocol=0
src ip=0.0.0.0, mask=0.0.0.0, port=0
dst ip=0.0.0.0, mask=0.0.0.0, port=0, dscp=0x0
Result:
input-interface: INSIDE
input-status: up
input-line-status: up
output-interface: OUTSIDE
output-status: up
output-line-status: up
Action: drop
Drop-reason: (acl-drop) Flow is denied by configured rule
Please guide.
Regards,
Deepak Kumar
01-25-2018 08:30 AM
01-25-2018 09:47 AM
01-25-2018 11:08 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide