cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
368
Views
0
Helpful
1
Replies

NAT Problem With ASA5520 and asa8.0(2) software

eoin
Level 1
Level 1

I am currently experiencing problems with inbound nat on a ASA5520 with version 8.0(2) software. I cannot get inbound nat to work. however when I downgrade the software to asa712-k8 inbound nat will Work. Below are the commands which are not compatible after the downgrade

*** Output from config line 4, "ASA Version 8.0(2) "

icmp unreachable rate-limit 1 burst-size 1

^

ERROR: % Invalid input detected at '^' marker.

*** Output from config line 46, "icmp unreachable rate-li..."

timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00

^

ERROR: % Invalid input detected at '^' marker.

*** Output from config line 59, "timeout sip 0:30:00 sip_..."

dynamic-access-policy-record DfltAccessPolicy

^

ERROR: % Invalid input detected at '^' marker.

*** Output from config line 61, "dynamic-access-policy-re..."

threat-detection basic-threat

^

ERROR: % Invalid input detected at '^' marker.

*** Output from config line 69, "threat-detection basic-t..."

threat-detection statistics access-list

^

ERROR: % Invalid input detected at '^' marker.

*** Output from config line 70, "threat-detection statist..."

policy-map type inspect dns preset_dns_map

^

ERROR: % Invalid input detected at '^' marker.

*** Output from config line 76, "policy-map type inspect ..."

parameters

^

ERROR: % Invalid input detected at '^' marker.

*** Output from config line 77, " parameters"

message-length maximum 512

^

ERROR: % Invalid input detected at '^' marker.

*** Output from config line 78, " message-length maximum..."

inspect dns preset_dns_map

^

ERROR: % Invalid input detected at '^' marker.

*** Output from config line 81, " inspect dns preset_dns..."

.

prompt hostname context

^

ERROR: % Invalid input detected at '^' marker.

*** Output from config line 97, "prompt hostname context "

Cryptochecksum (unchanged): xxx

Type help or '?' for a list of available commands.

ciscoasa>

ciscoasa>

ciscoasa>

ciscoasa>

ciscoasa>

ciscoasa>

ciscoasa>

ciscoasa>

ciscoasa>

ciscoasa> en

1 Reply 1

ashleyw
Level 1
Level 1

this does not look anything like nat. what makes you think the above is causing the issue?

Can you put the whole config up please?

Remove all passwords, goes without saying I know.