Will adding route-lookup in NAT statement cause any temporary outage

[cHrome08]

Hey Guys,

Might be a silly question, but i thought I would rather post this and get confirmation.

I currently have an ASA that is not reachable at the moment because we have set up an IPSEC tunnel as a temp workaround at the new site (long story).

This was done by my colleague and ever since then we are not able to get connectivity to the ASA but we are able to remotely connect to other device behind the ASA,

Looking at the config, it has the following:-

nat (INSIDE,OUTSIDE) source static net-INSIDE net-INSIDE destination static net-HQ net-HQ

I beleive its missing a route-lookup and a no-proxy-arp option at the end of the nat statement.
My question is, as this site is live and can't afford any downtime, will me adding the command route-lookup and no-proxy-arp at the end of the NAT cause any temporary outage?

Thanks.

[paul driver · Accepted solution]

Hello

Curious have you tired connecting to the FW via its tunnel addressing?

Can you post the config of the asa?

[cHrome08]

Hi Paul,

Thats weird that i did not get an email saying that someone responded to my post.
Upon checking, the firewall on both ends did not have a tunnel IP assigned on each end.
That was the issue.
Thank you for guiding me to the right solution.

Regards,

Han

[paul driver]

Hello
Glad to hear your issue is now sorted