ASR1001-HX NAT translation does not work after the update

[krutsky]

After updating the firmware to version 16.12.07 (from version 16.06.04), the translation rules for the ip address pool stopped working.

Static rules work and 1:1 rules work. I don't know how to solve the problem, an example of a broken rule:

ip access-list extended HOSTs_to_Inet

 10 permit icmp host 172.24.98.10 any

!

ip nat pool FW-Inet-IP 129.159.XXX.234 129.159.XXX.234prefix-length 28

!

ip nat name FW_Inet_Dinamic inside source list HOSTs_to_Inet pool FW-Inet-IP vrf vrf_internet overload

Used Guide https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-16/nat-xe-16-book/iadnat-addr-consv.html

[pieterh]

did you also upgraded the ROMmon ?

ROMmon Compatibility Matrix

The following table lists the ROMmon releases supported in Cisco IOS XE 16.x.x releases.

Table 1. Minimum and Recommended ROMmon Releases Supported on Cisco 1000 Series Integrated Services Routers

Cisco IOS XE Release	Minimum ROMmon Release Supported for IOS XE	Recommended ROMmon Release Supported for IOS XE
16.6.x	16.6(1r)	16.6(1r)
16.7.x	16.6(1r)	16.6(1r)
16.8.x	16.8(1r)	16.8(1r)
16.9.x	16.9(1r)	16.9(1r)
16.10.x	16.9(1r)	16.9(1r)
16.11.x	16.9(1r)	16.9(1r)
16.12.x	16.9(1r)	16.12(1r)

[Shambhu-Kumar]

What is your ROMMON version,

 please check with "show platform"

[krutsky]

I'm going through the minimum value.

Chassis type: ASR1001-HX

Slot CPLD Version Firmware Version
--------- ------------------- -------
0 19030215 16.9(4r)
R0 19030215 16.9(4r)
F0 19030215 16.9(4r)

[Shambhu-Kumar]

Make sure you have backup for running configuration, before upgrading CPLD and FGPA.

[krutsky]

Tell me, doesn't my version meet the minimum requirements?

[Shambhu-Kumar]

16.12.X is already end-of-sale. Better you go for 17.3.x with rommon 17.3(1r).

Please check 

https://www.cisco.com/c/en/us/td/docs/routers/asr1000/rommon/asr1000-rommon-upg-guide.html