Problem with Static and Dynamic NAT on ASA5510

smohanasundaram · ‎05-02-2008

Hi

i am using ASA5510 for my network.i have configured static and Dynamic NAT.static NAt working fine.Dynamic NAT pool have a 10 public Ip Addresses.but inside users cannot able to access internet.

Error:

Port map Translation failed.

but this dynamic NAT changed to PAT .its working.

Please help me to configure Dynamic NAT

regs

S.Mohana sundaram

srue · ‎05-02-2008

can you post your nat and global commands that you have configured please. is the dynamic nat pool in the same network range as the IP address of your outside interface of the ASA?

smohanasundaram · ‎05-02-2008

Hi

yes.my global pool same as outside Ip range

my puplic ip is x.x.x.0/27

the above subnet have 30 Ip's active the range is x.x.x.1 to x.x.x.30,x.x.x.31 is broadcast.

global (outside) 1 x.x.x.15-x.x.x.29

nat (inside) 1 172.16.0.0 255.255.0.0

static (DMZ,outside) x.x.x.4 10.1.1.2 netmask 255.255.255.255

static (DMZ,outside) x.x.x.5 10.1.1.3 netmask 255.255.255.255

static (DMZ,outside) x.x.x.6 10.1.1.4 netmask 255.255.255.255

static (DMZ,outside) x.x.x.7 10.1.1.5 netmask 255.255.255.255

static (DMZ,outside) x.x.x.8 10.1.1.6 netmask 255.255.255.255

Thanks.

regs

S.Mohana sundaram

srue · ‎05-05-2008

with this configuration, what is the output of "show xlate".

also, have you tried something like:

global (outside) 1 x.x.x.15-x.x.x.28

global (outside) 1 x.x.x.29