Solved: ERROR: % Incomplete command

stuartcox79 · ‎07-10-2010

Hello,

I have an ASA 5505 that won't take the static or global commands for NAT.

ASA5505# conf t
ASA5505(config)# static
ERROR: % Incomplete command

or

ASA5505# conf t
ASA5505(config)# global
ERROR: % Incomplete command

Sorry I have very little Cisco firewall experience, but isn't the below command valid?

static (inside,outside) 74.1.1.1 10.1.1.1 netmask 255.255.255.255

I am running Cisco Adaptive Security Appliance Software Version 8.3(1).

I also have the base license. ASA5505-50-BUN-K9

Thanks

Jennifer Halim · ‎07-10-2010

No, from version 8.3.1 onwards, the NAT statements have completely changed.

Pre 8.3.1:

static (inside,outside) 74.1.1.1 10.1.1.1 netmask 255.255.255.255

Now change to:

object network obj-10.1.1.1

host 10.1.1.1

nat (inside,outside) static 74.1.1.1

NAT in version 8.3.1 is divided into 2:

1) Network object NAT (auto NAT)

2) Twice NAT (manual NAT)

Here is more information to get familiarise with the new NAT:

Hope that helps.

Jennifer Halim · ‎07-10-2010

No, from version 8.3.1 onwards, the NAT statements have completely changed.

Pre 8.3.1:

static (inside,outside) 74.1.1.1 10.1.1.1 netmask 255.255.255.255

Now change to:

object network obj-10.1.1.1

host 10.1.1.1

nat (inside,outside) static 74.1.1.1

NAT in version 8.3.1 is divided into 2:

1) Network object NAT (auto NAT)

2) Twice NAT (manual NAT)

Here is more information to get familiarise with the new NAT:

Hope that helps.

stuartcox79 · ‎07-10-2010

Thanks, so much. Everything makes sense now. I am no longer confused. I rolled back to 8.2(2).