cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5479
Views
5
Helpful
15
Replies

No Translation Group Found

john.irizarry
Level 1
Level 1

I am getting the following error from my ASA logs:

No translation group found for udp src inside:10.10.10.4/27351 dst outside:10.10.50.42/1129

outside 10.10.50.42 is the address given by my VPN pool. So I have a user on VPN trying to get his mail from the inside.

Strange thing is the VPN users have access to the inside network and all seems to be working fine.

The error suggests that a packet does not have a matching outbound NAT command rule.

Here are my NAT rules:

access-list nonat-in extended permit ip LAN 255.255.255.0 VPN 255.255.255.0

nat (outside) 1 0.0.0.0 0.0.0.0

nat (outside) 1 VPN 255.255.255.0 outside

nat (inside) 0 access-list nonat-in

nat (inside) 1 0.0.0.0 0.0.0.0

nat (dmz) 0 access-list nonat-dmz

nat (dmz) 1 0.0.0.0 0.0.0.0

What NAT would be missing?

15 Replies 15

Result of the command: "sho nameif"

Interface Name Security

Ethernet0/0 outside 0

Ethernet0/1 inside 100

Ethernet0/2 dmz 50

Management0/0 management 100

Gateway of last resort is 66.159.217.1 to network 0.0.0.0

C 66.159.217.0 255.255.255.0 is directly connected, outside

C 127.0.0.0 255.255.0.0 is directly connected, cplane

S 10.0.0.0 255.0.0.0 [1/0] via 10.10.10.1, inside

C LAN 255.255.255.0 is directly connected, inside

C DMZ 255.255.255.0 is directly connected, dmz

S 10.10.50.42 255.255.255.255 [1/0] via 66.159.217.1, outside

S 10.10.50.41 255.255.255.255 [1/0] via 66.159.217.1, outside

S* 0.0.0.0 0.0.0.0 [1/0] via 66.159.217.1, outside

Also, Nat-control is enabled

Thanks!

Review Cisco Networking for a $25 gift card