07-12-2019 10:16 AM - edited 02-21-2020 09:18 AM
So I have NAT config statements on ASA but the objects I have entered (configured via ASDM) show up in the running config as DM_INLINE still. Any ideas?
Solved! Go to Solution.
07-12-2019 10:34 AM
07-12-2019 10:34 AM
07-16-2019 04:39 PM
07-16-2019 08:36 PM
If you create the object first (using any name you wish) it will be then available to use when creating NAT rules (or referencing in other elements such as ACLs). That makes the running-configuration as seen in the cli more human-readable. However the ASDM display just shows you the object name and you have to hover over it to see the constituent element(s) appear.
If you just add subnets, hosts etc. from the ASDM-based dialog box, then they will appear in the running-config as "DM_INLINE_XXX" (Device Manager Inline created objects). The ASDM GUI display them nicely as their constituent elements (without having to hover) since the computer does the work of looking up the cli object and parsing it for you.
Either method works equally well.
07-17-2019 06:36 PM
07-17-2019 07:35 PM
ASDM will match cli config exactly if you create the object first (in either ASDM or cli and using any naming convention you wish) and then reference it in the other sections like nat rule and access-lists.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide