ERROR: % Incomplete command

Answered Question
Jul 10th, 2010

Hello,

I have an ASA 5505 that won't take the static or global commands for NAT.

ASA5505# conf t
ASA5505(config)# static
ERROR: % Incomplete command

or

ASA5505# conf t
ASA5505(config)# global
ERROR: % Incomplete command

Sorry I have very little Cisco firewall experience, but isn't the below command valid?

static (inside,outside) 74.1.1.1 10.1.1.1 netmask 255.255.255.255

I am running Cisco Adaptive Security Appliance Software Version 8.3(1).

I also have the base license.  ASA5505-50-BUN-K9

Thanks

I have this problem too.
0 votes
Correct Answer by Jennifer Halim about 6 years 5 months ago

No, from version 8.3.1 onwards, the NAT statements have completely changed.

Pre 8.3.1:

static (inside,outside) 74.1.1.1 10.1.1.1 netmask 255.255.255.255

Now change to:

object network obj-10.1.1.1

     host 10.1.1.1

     nat (inside,outside) static 74.1.1.1

NAT in version 8.3.1 is divided into 2:

1) Network object NAT (auto NAT)

2) Twice NAT (manual NAT)

Here is more information to get familiarise with the new NAT:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/nat_overview.html#wp1122015

Hope that helps.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Jennifer Halim Sat, 07/10/2010 - 17:54

No, from version 8.3.1 onwards, the NAT statements have completely changed.

Pre 8.3.1:

static (inside,outside) 74.1.1.1 10.1.1.1 netmask 255.255.255.255

Now change to:

object network obj-10.1.1.1

     host 10.1.1.1

     nat (inside,outside) static 74.1.1.1

NAT in version 8.3.1 is divided into 2:

1) Network object NAT (auto NAT)

2) Twice NAT (manual NAT)

Here is more information to get familiarise with the new NAT:

http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/nat_overview.html#wp1122015

Hope that helps.

stuartcox79 Sat, 07/10/2010 - 19:52

Thanks, so much.  Everything makes sense now.  I am no longer confused.  I rolled back to 8.2(2).

Actions

This Discussion