10-13-2009 10:56 AM - edited 03-11-2019 09:25 AM
I am getting the following error from my ASA logs:
No translation group found for udp src inside:10.10.10.4/27351 dst outside:10.10.50.42/1129
outside 10.10.50.42 is the address given by my VPN pool. So I have a user on VPN trying to get his mail from the inside.
Strange thing is the VPN users have access to the inside network and all seems to be working fine.
The error suggests that a packet does not have a matching outbound NAT command rule.
Here are my NAT rules:
access-list nonat-in extended permit ip LAN 255.255.255.0 VPN 255.255.255.0
nat (outside) 1 0.0.0.0 0.0.0.0
nat (outside) 1 VPN 255.255.255.0 outside
nat (inside) 0 access-list nonat-in
nat (inside) 1 0.0.0.0 0.0.0.0
nat (dmz) 0 access-list nonat-dmz
nat (dmz) 1 0.0.0.0 0.0.0.0
What NAT would be missing?
Solved! Go to Solution.
10-14-2009 10:49 AM
Result of the command: "sho nameif"
Interface Name Security
Ethernet0/0 outside 0
Ethernet0/1 inside 100
Ethernet0/2 dmz 50
Management0/0 management 100
Gateway of last resort is 66.159.217.1 to network 0.0.0.0
C 66.159.217.0 255.255.255.0 is directly connected, outside
C 127.0.0.0 255.255.0.0 is directly connected, cplane
S 10.0.0.0 255.0.0.0 [1/0] via 10.10.10.1, inside
C LAN 255.255.255.0 is directly connected, inside
C DMZ 255.255.255.0 is directly connected, dmz
S 10.10.50.42 255.255.255.255 [1/0] via 66.159.217.1, outside
S 10.10.50.41 255.255.255.255 [1/0] via 66.159.217.1, outside
S* 0.0.0.0 0.0.0.0 [1/0] via 66.159.217.1, outside
Also, Nat-control is enabled
Thanks!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide