cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
349
Views
0
Helpful
1
Replies

one more time: No translation group found for tcp src

tb
Level 1
Level 1

Hello, I'm getting the famous "No translation group found for tcp src" error and can't see the reason.

My config is a little strange. The outside interface is not used (reserved for future integration), the inside interface points to the user network 172.31.48.0/22 and the IF_SECURE_MGMT interface connects to 192.168.102.0/23 network.

What I want to achieve is NATting the traffic to all destinations coming from the IF_SECURE_MGMT interface except for destinations in the user network 172.31.48.0/22.

When trying to access a server in 192.168.102.0/23 network eg by RDP from a host in the user network 172.31.48.0/22 the "no translation group found" error pops up.

This is a part of the ASA 5510 config, it's still running version 8.2:

interface Ethernet0/0

shutdown

nameif outside

security-level 0

no ip address

ospf cost 10

!

interface Ethernet0/1

speed 1000

duplex full

nameif inside

security-level 100

ip address 172.31.48.4 255.255.252.0

ospf cost 10

!

interface Ethernet0/1.102

vlan 102

nameif IF_SECURE_MGMT

security-level 90

ip address 192.168.103.254 255.255.254.0

ospf cost 10

access-list ACL_INSIDE_ACCESS_IN extended permit tcp object-group OG_NETWORK_MANAGEMENT_HOSTS LOCAL_LAN_MANAGEMENT 255.255.254.0 object-group OG_SERVICE_NETWORK_MANAGEMENT_TCP

access-list ACL_INSIDE_ACCESS_IN extended permit udp object-group OG_NETWORK_MANAGEMENT_HOSTS LOCAL_LAN_MANAGEMENT 255.255.254.0 object-group OG_SERVICE_NETWORK_MANAGEMENT_UDP

access-list ACL_NONAT_IF_SECURE_MGMT extended permit ip LOCAL_LAN_MANAGEMENT 255.255.254.0 LOCAL_LAN_DGB_BVV 255.255.252.0

nat (IF_SECURE_MGMT) 0 access-list ACL_NONAT_IF_SECURE_MGMT

nat (IF_SECURE_MGMT) 11 LOCAL_LAN_MANAGEMENT 255.255.254.0 outside

global (inside) 11 interface

Any help appreciated. Thanks.

1 Reply 1

rfalconer.sffcu
Level 3
Level 3

Can you show any static statements and the relevant object groups?

Review Cisco Networking for a $25 gift card