if you're using a trunk port between the switches, the mgmt vlan needs to be allowed across the trunk & it needs to exist on both switches or you could connect the new switch to an access port on your mgmt vlan on the original switch, then create the mgmt svi on the new switch with IP in the same subnet as the mgmt vlan regards, mk ... View more

the asa has 3 main categories of nat - manual nat, object nat (auto nat), and manual nat after auto these are actually applied in sequential order like an acl sh nat - will show the order of the rules sh run nat - to see the actual nat config this is using static nat - this entry is also known as nat exemption & is often used for vpn traffic for traffic using any ingress interface & egressing the outside interface - this nat rule will apply obj-grp 1 has a static mapping to itself only when the dest is obj-grp 2 cisco rec to use no-proxy-arp & route-lookup - so asa int wont send arp for next hop & will use route table for traffic regards, mk ... View more