nat (inside,outside) source dynamic NAT-POOL interface destination static obj-10.5.5.0 obj-10.5.5.0 --->meaning
nat(real int,mapped int) source dynamic (real source)(mapped source) destination static (real dest) (mapped dest)
What i understood from above NAT statement is:
1)It performs dynamic PAT between the "inside" interface & "outside" interface.
2)It performs PAT only when the source network is from NAT-POOL and destination is obj-10.5.5.0
3) If source from NAT-POOL connects to remote obj-10.5.5.0, it will use the interface ip address of "outside" interface for dynamic PAT translation.
NAT-POOL consist of
10.7.7.0/24
obj-10.5.5.0 consist of
10.5.5.0/24
on My firewall below is NAT statement.
Manual NAT Policies (Section 1)
nat (inside,outside) source dynamic NAT-POOL interface destination static obj-10.5.5.0 obj-10.5.5.0
!
Auto NAT Policies (Section 2)
object network obj-10.7.7.190
nat (inside,outside) static 10.5.5.190
!
My question is what if source is 10.5.5.5 (or any other IP from 10.5.5.0/24) and destination is 10.7.7.190
It must be matching Section 1 NAT, that's why i am getting below rpf-check drop. But i am not sure how this NAT is being checked.
Firewall is dropping this
Phase: 7
Type: NAT
Subtype: rpf-check
Result: DROP
Config:
nat (inside,outside) source dynamic NAT-POOL interface destination static obj-10.5.5.0 obj-10.5.5.0
Additional Information:
Many Thanks in advance.
