Removing a static nat on Pix 515E

Unanswered Question
Patrick Iseli Mon, 04/30/2007 - 15:39
User Badges:
  • Gold, 750 points or more

You just need to put the statement in front of the line !


no static (inside,outside) 65.91.XXX.XX 192.168.211.1 netmask 255.255.255.255 0 0


Usulaly after changing the NAT to clear the translation table:


clear xlate


But take care this will reset all connections.


sincerely

Patrick

Fernando_Meza Mon, 04/30/2007 - 19:19
User Badges:
  • Gold, 750 points or more

Hi .. add the no in front of the sentence no static (inside,outside) 65.91.XXX.XX 192.168.211.1 netmask 255.255.255.255 0 0 and then type in clear xlate global 65.91.XXX.XX netmask 255.255.255.255. In that way you will not affect the other connections.


I hope it helps .. please rate it if it does

hussainkhalid Wed, 07/04/2007 - 22:05
User Badges:

I need to do the same, but it gives me some error


ERROR: % Invalid input detected at '^' marker.


i have seen something in


sh xlate


and it shows me the same


Global XXX.XXX.XXX.XXX Local XXX.XXX.XXX.XXX


Do i need to remove the this also because it is the same NAT which i want to remove.


how do i remove this as well?


clear xlate? what is xlate? are these active connections? what if i say clear xlate? will it remove the xlate entries permanently? please help!

Jon Marshall Wed, 07/04/2007 - 22:58
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Hi


To clear an an an xlate entry use the command Fernando sent. This will remove the specific xlate entry.


Xlate is the translation table that the pix uses for NAT translations. If you say "clear xlate" you remove all the current translations which means that all existing connections through the firewall will be dropped, probably not something you want to do in a production environment :-)


The xlate entries are dynamically added so if you remove it the next time the connection is made the entry will reappear. If you want to ensure that an xlate entry never returns you need to remove the corresponding nat entry from your configuration.


HTH


Jon

hussainkhalid Wed, 07/04/2007 - 23:31
User Badges:

no static (Inside,Outside) 62.215.215.215 62.215.215.215 netmask 255.255.255.255

^ clear global 62.215.215.215 Local 62.215.215.215


ERROR: % Invalid input detected at '^' marker.


I GET THIS ERROR MESSAGE! PLEASE HELP ON THIS!



Jon Marshall Wed, 07/04/2007 - 23:35
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Hi


Instead of typing this


clear global 62.215.215.215 Local 62.215.215.215


try


clear xlate global 62.215.215.215


BUT before you do this type


"sh xlate"


If the entry for 62.215.215.215 is not in the xlate table you don't need to clear it.


HTH


Jon

hussainkhalid Thu, 07/05/2007 - 02:24
User Badges:

didnt work, doesnt give any error but when i say


sh xlate


the entry is still there!


do i need to remove NAT before that?

Jon Marshall Thu, 07/05/2007 - 02:33
User Badges:
  • Super Blue, 32500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN

Hi


Can you post the running config of your firewall + the output of a "sh xlate"


Jon

hussainkhalid Mon, 07/09/2007 - 04:13
User Badges:

i tried to delete the static nat and xlate...doesnt work! xlate doesnt give any error but still shows in the list...and static nat gives error on that command...


ERROR: % Invalid input detected at '^' marker.

Actions

This Discussion