Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I'm trying to NAT self generated traffic from an ASA to a AAA server, but the NAT statement isn't catching the traffic.Below is the basic config.The ASA server when authenticating to the AAA server is using the inside IP address of 10.1.1.50, but I ...
9.16(4)62 I've looked at other workarounds, like using a subinterface or an unused interface on the ASA and setting the ip to 192.168.200.50, then setting AAA to use that interface, but I was trying to avoid that if there was a way to NAT the inside...
If I do a ping INSIDE 192.168.33.33, I don't get a reply and I get an untranslate_hit on the any any NAT. 4 (any) to (any) source static ASAPRIV ASANAT destination static SERVERFARM SERVERFARMtranslate_hits = 0, untranslate_hits = 5Source - Origin: ...
I added it in and when I ping the AAA server I get a reply and a show NAT detail give me.4 (any) to (any) source static ASAPRIV ASANAT destination static SERVERFARM SERVERFARMtranslate_hits = 0, untranslate_hits = 0Source - Origin: 10.1.1.50/32, Tran...
I can reach the AAA server from the ASA, but the AAA server is seeing the source ip of 10.1.1.50, not 192.168.200.50. When I do a sh nat det, I see (any) to (any) source static ASAPRIV ASANET destination static DEV-SERVERFARM DEV-SERVERFARMtranslate_...