07-24-2008 09:49 PM - edited 03-11-2019 06:19 AM
Hi,
In my ASA I am getting some error when I want to configure static NAT and NAT exempt configuration. I think Some miss configuration has been done.
The error msg given below..
Firewall-ASA-02(config)# static (inside,outside) x.x.x.12 10.138.77.54 netma$
INFO: Global address overlaps with NAT exempt configuration
Firewall-ASA-02(config)# no access-list nonat extended permit ip 10.138.77.0 255.$
INFO: Outside address overlap with static NAT configuration
Plz help to reslove this issue..why i am getting this type of error msg.
Regards,
som
Solved! Go to Solution.
07-25-2008 01:15 AM
as i see ur config the following line not sure if u need it if not try to REMOVE it and let me know
access-list nonat extended permit ip any 10.138.77.192 255.255.255.224
i think the following one too, !
access-list nonat extended permit ip any 10.138.74.64 255.255.255.192
good luck and let me know
07-24-2008 09:53 PM
can u post ur nat config or show run ?
07-24-2008 10:25 PM
07-25-2008 12:52 AM
ok
now with these config dose the ASA working ok?
and when u get this errors?
can u put the lines that u wanna add and u getting errors when adding them
07-25-2008 01:00 AM
Hi,
I am getting error whnever I try to add a new STATIC NAT and NAT EXEMPT.
plz find the eeror msg..
Firewall-ASA-02(config)# static (inside,outside) x.x.x.25 10.138.77.62 netmask 255.255.255.255
INFO: Global address overlaps with NAT exempt configuration
INHYD-ASA-02(config)#access-list nonat extended permit ip 10.138.77.0 255.255.255.0 10.10.15.0 255.255.255.0
INFO: Outside address overlap with static NAT configuration
Regerds,
som
07-25-2008 01:15 AM
as i see ur config the following line not sure if u need it if not try to REMOVE it and let me know
access-list nonat extended permit ip any 10.138.77.192 255.255.255.224
i think the following one too, !
access-list nonat extended permit ip any 10.138.74.64 255.255.255.192
good luck and let me know
07-25-2008 01:40 AM
Hi
I have removed this two lines but same error msg coming.I am getting the same error msg during removing aslo and after removing when tried to add a new exempt.
07-25-2008 01:44 AM
remove them
save ur config
reload then try again
u have to reload after changing nat and nat policies
07-25-2008 02:26 AM
Hi,
Thanx!
Its working now without error.
Regards,
som
07-25-2008 02:35 AM
iam glad it working :)
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: