Needs help on NAT

[kope]

global (outside) 2 interface

nat (inside) 2 access-list dmz

access-list dmz permit ip 21.21.0.0 255.255.0.0

nat (inside) 0 0.0.0.0 0.0.0.0

static(inside,outside) 3.3.3.0 3.3.3.0 netmask 255.255.255.0

static(inside,outside) 3.3.4.0 3.3.4.0 netmask 255.255.255.0

.......

The problem here is I am unable to translate the 21.21.0.0 network to its global interface address.

Is the nat (inside) 0 0.0.0.0 0.0.0.0 the cause for not able to translate? Is it safe to remove this command?

thanks,

[Julio Carvajal]

Hello Kope,

Yes, that is the cause of the issue, please remove it!

Removing this you will start making translation from the inside of your ASA, that is all that is going to change.

Regards,

Do rate helpful posts

Julio