Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA 9.1 No-NAT IP

Hi

 

We currently have some ASA5510's running 8.2 and are planning to migrate to ASA5525's running 9.1 but have an issue when trying to upgrade the configuration in that it appears some routes we had are no longer supported so do not come over after the upgrade.

 

Essentially the 5510 is setup in routed mode and 90% of our addresses are static NAT's from private to public IP's but we have a handful of services which do not like NAT at all so we create a static NAT and then a static route which would route back to one of 5510 interfaces.

Example would be if the external IP we would like to use is 1.1.1.1 and the inside interface had an IP of 192.168.1.1 we would do the following -

 

static (inside,outside) 1.1.1.1 1.1.1.1

route inside 1.1.1.1 255.255.255.255 192.168.1.1

 

Then on the server we could configure the NIC with the IP of 1.1.1.1 and the gateway set to 192.168.1.1 and this would work great.

 

Now on ASA 9.1 the NAT side is fine but when we try to add the route we get -

 

%Invalid next hop address, it belongs to one of our interfaces

 

Has anyone else had this issue and if so have you found a workaround?

 

Cheers

 

Sean

 

 

 

3 REPLIES

Then on the server we could

Then on the server we could configure the NIC with the IP of 1.1.1.1 and the gateway set to 192.168.1.1 and this would work great.

==================

how it is possible ? somebody please explain

New Member

This was the point of the

This was the point of the static route which no longer seems to work on 9.1.

 

We have tried an ARP alias but this still does not work......
 

New Member

Ok think we have managed to

Ok think we have managed to get round this on our own by introducing a router.

 

 

370
Views
0
Helpful
3
Replies
CreatePlease login to create content