cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
384
Views
0
Helpful
3
Replies

When I create a nat, the computer can not browse internet

Neville Sanford
Level 1
Level 1

Hello

I have a ASA 5508x. I created a nat for a web server. It works fine. People can get to my webserver from the outside. However this server now can no longer browse the internet. All other computers that are not using nat can browse the internet. I took the nat away and the computer could browse the internet again. 

Please help

3 Replies 3

Akshay Rastogi
Cisco Employee
Cisco Employee

Hi Neville,

Could you please share the sample configuration you are using?

Regards,

Akshay Rastogi





Hi Nevile,

What i could remember from your earlier configuration, configure specific with your interfaces in your nat statements(do not use any any in interface). Specify exact interface name wherever possible.

For internet traffic have something like :

object net obj-any

 subnet 0 0

 nat(inside,outside) dynamic interface

For static nats try something like :

object net obj-server

 host <webserver internal ip>

 nat (inside,outside) static <mapped-ip>

Also when you mention host are able to reach internet w/o nat, does that mean that some other device peforming nating to public ip for internal private hosts?

Regards,

Akshay Rastogi

Review Cisco Networking for a $25 gift card