11-26-2019 11:15 PM
Hello experts,
I have a static NAT for my ASA outside interface, it was working before but suddenly stop work, I did packet tracer and the result is allowed, in the ASA access-list i do have many hits. When I do traceroute from the client pc the traffic stop on my ASA. The client can't browse to internet.
nat (Customs,Outside) source static RemoteGroup_Internet-Access interface
RemoteGroup_Internet-Access, this is an object-group and have tree hosts inside.
Attached the NAT I have in the ASA.
Any idea please.
11-27-2019 05:24 AM - edited 11-27-2019 05:35 AM
Hi Denilson,
Could you provide the following details?
Let me know if you need my help in real time troubleshooting over WebEx.
Regards,
Arpit Roy
Cisco TAC | Security
11-27-2019 05:42 AM
Hi Royarpit,
Thank you for your replay, and Yes I accept your help in real time. I am available now for WebEx.
11-29-2019 01:28 AM
Hello Experts,
I am still facing the problem, please help understanding the pcap I have attached. The result of packet tracer is allowed from host 172.189.10.11 to google.com. I have the acl permited host 172.189.10.11 to any IP and I have many hits. I have NAT from the same host to Outside interface. It works before but suddenly stop working. Any one can help please.
Thank you,
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide