nat (inside) command

Unanswered Question
Dec 4th, 2008

Hi trying to configure the nat (inside) 1 interface command but it gives me an error..


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jon Marshall Thu, 12/04/2008 - 03:23


Which device is this on and what is the exact command you are typing in ?

nat (inside) 1 interface

is not a valid command.

global (outside) 1 interface and

global (inside) 1 interface

are valid commands.

Can you tell us exactly what you want to achieve and we can hopefully supply the correct commands.


veena_kompal Thu, 12/04/2008 - 03:37

Hi Jon,

we have got two network connected on each of the interface inside ( and outside ( on the firewall and the default gateway is on the network).

From this router, there is a route to reach the firewall

ip route via (which is the ip of the ASA)

The problem is:

I am able to reach the network from the router but unable to ping the interface 192.168.29.x ..

please find the config of the firewall attached....

Jon Marshall Thu, 12/04/2008 - 03:45


Do you want to NAT the source addresses of 10.4.32.x as they go through the ASA ?. If so

nat (inside) 1

If you don't want to NAT them

nat (inside) 0

When you ping from the router make sure it is using a 10.4.32.x source address.

Also i'm assuming from your acls that you are ping ? Don't test connectivity by trying to ping the outside interface address of the ASA - this won't work.



This Discussion