cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1078
Views
0
Helpful
5
Replies

NAT for Anyconnect

Justinas1
Level 1
Level 1

So my Anyconnect wizard ended up with errors thus not setting NAT exceptions.

And I'm having hard time doing it myself.

 

Situation:

Local pool: 192.168.1.5-192.168.1.100 255.255.255.0

Anyconnect pool: 192.168.2.1 - 192.168.2.51 255.255.255.0

Goal: Anyconnect clients to be able to access LAN IPs and internet.

 

Trying to this, but no success:

[ERROR] nat (inside,outside) 1 source static NETWORK_OBJ_192.168.1.0_24 NETWORK_OBJ_192.168.1.0_24 destination static NETWORK_OBJ_192.168.2.0_24 NETWORK_OBJ_192.168.2.0_24 no-proxy-arp

nat (inside,outside) 1 source static NETWORK_OBJ_192.168.1.0_24 NETWORK_OBJ_192. ^168.1.0_24 destination static NETWORK_OBJ_192.168.2.0_24 NETWORK_OBJ_192.168.2.0
_24 no-proxy-arp

ERROR: % Invalid input detected at '^' marker.

5 Replies 5

nat (inside,outside) 1 source static NETWORK_OBJ_192.168.1.0_24 NETWORK_OBJ_192.168.1.0_24 destination static NETWORK_OBJ_192.168.2.0_24 NETWORK_OBJ_192.168.2.0_24 no-proxy-arp

change to

nat (inside,outside) 1 source static NETWORK_OBJ_192.168.2.0_24 NETWORK_OBJ_192.168.2.0_24 destination static NETWORK_OBJ_192.168.1.0_24 NETWORK_OBJ_192.168.1.0_24 no-proxy-arp

 try this change 

No go:

 

nat (inside,outside) source static NETWORK_OBJ_192.168.2.0_24 NETWORK_OBJ_192.16 ^8.2.0_24 destination static NETWORK_OBJ_192.168.1.0_24 NETWORK_OBJ_192.168.1.0 _24 no-proxy-arp

ERROR: % Invalid input detected at '^' marker.

ciscoasa(config-network-object)#

or 
ciscoasa(config)#

 

where you config this NAT?

this is global config with ciscoasa(config)# only

Global config.

Name is different 

16 8 not same 168,

there is must no space between number,

check keyboard it sometimes add space before letter.