cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1781
Views
0
Helpful
3
Replies

STATIC NAT TO OUTSIDE INTERFACE NOT WORKING

denilson.mota
Level 1
Level 1

Hello experts,

 

I have a static NAT for my ASA outside interface, it was working before but suddenly stop work, I did packet tracer and the result is allowed, in the ASA access-list i do have many hits. When I do traceroute from the client pc the traffic stop on my ASA. The client can't browse to internet.

 

nat (Customs,Outside) source static RemoteGroup_Internet-Access interface

RemoteGroup_Internet-Access, this is an object-group and have tree hosts inside.

 

Attached the NAT I have in the ASA.

 

Any idea please.

3 Replies 3

royarpit
Cisco Employee
Cisco Employee

Hi Denilson,

Could you provide the following details?

  • Output of "show tech"
  • Source IP address:
  • Mapped IP address:

Let me know if you need my help in real time troubleshooting over WebEx.

Regards,

Arpit Roy

Cisco TAC | Security

Hi Royarpit,

Thank you for your replay, and Yes I accept your help in real time. I am available now for WebEx.

Hello Experts,

 

I am still facing the problem, please help understanding the pcap I have attached. The result of packet tracer is allowed from host 172.189.10.11 to google.com. I have the acl permited host 172.189.10.11 to any IP and I have many hits. I have NAT from the same host to Outside interface. It works before but suddenly stop working. Any one can help please.

 

Thank you,

Review Cisco Networking for a $25 gift card