ASA NAT Issue

Unanswered Question
Apr 2nd, 2014
User Badges:

Hi,

 

 

I have a Desktop with ip:10.10.3.4 in my network. In this PC internet working.

 

when i try to add the NAT command in Cisco ASA 5510 -  in this scenario 10.10.3.4 to some public ip X.X.X.X (one to one natting)


static (inside,outside) X.X.X.X 10.10.3.4 netmask 255.255.255.255

Issues are:

1. Internet on this local pc is not working (i.e.., 10.10.3.4)

2. Public ip also not accessable from outside.

 

Thanks for you valuable time and consideration.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Charles W Wed, 04/02/2014 - 08:39
User Badges:

Just a shot in the dark - have you added rules to permit the relevant traffic to your host?

Ruben C Wed, 04/02/2014 - 12:34
User Badges:
  • Bronze, 100 points or more
  • Community Spotlight Award,

    Portuguese Best Publication, April 2017

i believe you have already the access-group outside inbound. Check the rules and in last case the Logs messages on Firewall because it help always

ahcimran1 Wed, 04/02/2014 - 22:15
User Badges:

I have already added the rules to permit the relevant traffic to my host.

 

 

how to check the logs messages on firewall?

Ruben C Thu, 04/03/2014 - 01:35
User Badges:
  • Bronze, 100 points or more
  • Community Spotlight Award,

    Portuguese Best Publication, April 2017

using ASDM:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-nex...

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-nex...

Using CLI via console/telnet/

Configure the following on the Cisco ASA:

 

ciscoasa(config)#logging monitor 7
ciscoasa(config)#logging console 7
ciscoasa(config)#terminal monitor
ciscoasa(config)#logging on
ciscoasa(config)#logging trap 6
ciscoasa(config)#sh logg

 

 

Actions

This Discussion