cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
826
Views
10
Helpful
7
Replies

Firewaal - NAT binding configuration erases

Fouard
Level 1
Level 1

Dear experts,

My company runs a vpn through a firewall. For far too long I have observed that the NAT binding erases when the firewall loses  power or when restarted. I have to reconfigure it all the time when this occurs. Please help.

Thanks in advance.

7 Replies 7

balaji.bandi
Hall of Fame
Hall of Fame

Active NAT Sessions will be gone - if you mean confirm lost ?

what Firewall and Code running on the Firewall. have you saved the config after NAT confiuration done, show us some example document.

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Many thanks for your reply. I do save the configuration after but the issue remains persistent . 

are you run HA ? I think the active FW sync config with standby and if active dont safe the config then standby will not get copy of NAT config. 

what Firewall and Code running on the Firewall. have you saved the config after NAT confiuration done, show us some example document.

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Fouard
Level 1
Level 1

Below is the firewall NAT configuration when working fine. As communicated earlier, after a power loss or reboot of the firewall, the configuration wipes out and have to be redone!

# show nat inSIDE1
match ip INSIDE1 10.117.0.0 255.255.255.0 OUTSIDE 10.109.10.0 255.255.255.0
static translation to 10.18.117.0
translate_hits = 66, untranslate_hits = 0
match ip INSIDE1 10.0.1.0 255.255.255.0 OUTSIDE 10.109.10.0 255.255.255.0
static translation to 10.18.117.0
translate_hits = 0, untranslate_hits = 0
match ip INSIDE1 10.0.2.0 255.255.255.0 OUTSIDE 10.109.10.0 255.255.255.0
static translation to 10.18.117.0
translate_hits = 0, untranslate_hits = 0

 

BELOW IS THE VERSION OF THE ROUTER INFORMATION

PAPSSVPN# show version

Cisco Adaptive Security Appliance Software Version 8.2(5)
Device Manager Version 6.4(5)

Compiled on Fri 20-May-11 16:00 by builders
System image file is "disk0:/asa825-k8.bin"
Config file at boot was "startup-config"

 up 31 mins 28 secs

Hardware: ASA5540, 2048 MB RAM, CPU Pentium 4 Celeron 2600 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash Firmware Hub @ 0xffe00000, 1024KB

Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
Boot microcode : CN1000-MC-BOOT-2.00
SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
IPSec microcode : CNlite-MC-IPSECm-MAIN-2.05

 

Thanks

 

 

this XLATE not NAT safe in running config, 
do show running 
and check the NAT config 
the XLATE sure delete after reload. 

Please help with clarity sir. Am lost.

Thanks