04-30-2007 03:11 PM - edited 03-11-2019 03:07 AM
I have a static nat table with this rule
( i have put in X to cover my publci ip for security reasons for this post)
static (inside,outside) 65.91.XXX.XX 192.168.211.1 netmask 255.255.255.255 0 0
How do I remove just that one line without clearing the entire table?
04-30-2007 03:39 PM
You just need to put the
no static (inside,outside) 65.91.XXX.XX 192.168.211.1 netmask 255.255.255.255 0 0
Usulaly after changing the NAT to clear the translation table:
clear xlate
But take care this will reset all connections.
sincerely
Patrick
04-30-2007 07:19 PM
Hi .. add the no in front of the sentence no static (inside,outside) 65.91.XXX.XX 192.168.211.1 netmask 255.255.255.255 0 0 and then type in clear xlate global 65.91.XXX.XX netmask 255.255.255.255. In that way you will not affect the other connections.
I hope it helps .. please rate it if it does
07-04-2007 10:05 PM
I need to do the same, but it gives me some error
ERROR: % Invalid input detected at '^' marker.
i have seen something in
sh xlate
and it shows me the same
Global XXX.XXX.XXX.XXX Local XXX.XXX.XXX.XXX
Do i need to remove the this also because it is the same NAT which i want to remove.
how do i remove this as well?
clear xlate? what is xlate? are these active connections? what if i say clear xlate? will it remove the xlate entries permanently? please help!
07-04-2007 10:58 PM
Hi
To clear an an an xlate entry use the command Fernando sent. This will remove the specific xlate entry.
Xlate is the translation table that the pix uses for NAT translations. If you say "clear xlate" you remove all the current translations which means that all existing connections through the firewall will be dropped, probably not something you want to do in a production environment :-)
The xlate entries are dynamically added so if you remove it the next time the connection is made the entry will reappear. If you want to ensure that an xlate entry never returns you need to remove the corresponding nat entry from your configuration.
HTH
Jon
07-04-2007 11:31 PM
no static (Inside,Outside) 62.215.215.215 62.215.215.215 netmask 255.255.255.255
^ clear global 62.215.215.215 Local 62.215.215.215
ERROR: % Invalid input detected at '^' marker.
I GET THIS ERROR MESSAGE! PLEASE HELP ON THIS!
07-04-2007 11:35 PM
Hi
Instead of typing this
clear global 62.215.215.215 Local 62.215.215.215
try
clear xlate global 62.215.215.215
BUT before you do this type
"sh xlate"
If the entry for 62.215.215.215 is not in the xlate table you don't need to clear it.
HTH
Jon
07-05-2007 02:24 AM
didnt work, doesnt give any error but when i say
sh xlate
the entry is still there!
do i need to remove NAT before that?
07-05-2007 02:33 AM
Hi
Can you post the running config of your firewall + the output of a "sh xlate"
Jon
07-05-2007 03:09 AM
sorry, cannot!
07-09-2007 04:13 AM
i tried to delete the static nat and xlate...doesnt work! xlate doesnt give any error but still shows in the list...and static nat gives error on that command...
ERROR: % Invalid input detected at '^' marker.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: