New ASA 8.4 Syntax

[yuhuiyao]

All,

I have the following in the config and want to nat 10.1.1.6 to 209.165.201.15 while it seemed that "nat (inside,outside) source dynamic any interface" take precedence and nat 10.1.1.6 to the interface ip.

object network obj-10.1.1.6
host 10.1.1.6

object network obj-209.165.201.15
host 209.165.201.15

nat (inside,outside) static source obj-10.1.1.6 obj-209.165.201.15

nat (inside,outside) source dynamic any interface

Can anyone let me know why? I think more specific should take precedence.

Thanks

[Federico Coto Fajardo]

Hi,

Can you do:

clear xlate local 10.1.1.6

show xlate local 10.1.1.6

And verify that it's being NATed to the interface IP instead than the static?

Federico.