Unanswered Question
Sep 28th, 2010
User Badges:

Hello I have a problem with NAT,

the original config works fine (two lines below)

nat (inside) 1

global (outside) 1

Additional I want to NAT the inbound traffic for a customer from outside 172.16.X.X to but when I type in the two lines below,

I get an error message like no translations group found.

global (inside) 2  netmask
nat (outside) 2 outside

I have no idea what went wrong.

Many thanks for your help

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Ashley Georgeson Tue, 09/28/2010 - 01:57
User Badges:

I think for your inbound traffic (outside to inside) you will require a static nat translation.


static (outside,inside) netmask 0 0

I don't think that specific example will work for you due to subnet mask mis-match, but the theory may be  on the right lines.

Alternatively, I found a post discussing the method you were trying, also finding similar issues:

It may be worth a read - especially the conduit permit ip command and debugging they are using to troubleshoot.
Regards, Ash.
oezkanuenlue Tue, 09/28/2010 - 02:14
User Badges:

Thank you for your help ,

but I want to NAT dynamic addresses, without using static.

praprama Tue, 09/28/2010 - 08:54
User Badges:
  • Cisco Employee,


Can you past the exact error message you are getting? Also, please try running a packet-tracer from the outside to the inside and send that output as well.

Thanks and Regards,



This Discussion