Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA Dynamic Routing and Static NAT

Hi,

I have a ASA5510 with 2 internal interfaces (inside1 and inside2 same security level) configured with OSPF for dynamic routing with 2 routers to corporate subnets. I have a server in a private subnet that needs to be accessed from Internet. So static pat is used in ASA with the command

static (inside1, outside) tcp interface www 192.168.1.1 www netmask 255.255.255.255

As OSPF is in use, the subnet 192.168.1.0/24 may be reachable from interface inside2. When I tried to configure the static command for inside2,

static (inside2, outside) tcp interface www 192.168.1.1 www netmask 255.255.255.255

the error message came out "WARNING: mapped-address conflict with existing static...". Is this just a warning, or this is not possible in ASA.

Thanks.

Everyone's tags (3)
1 ACCEPTED SOLUTION

Accepted Solutions

ASA Dynamic Routing and Static NAT

This is not possible routing for subnet 192.168.1.0/24 will only point to one interface  inside1 or inside 2. Thats the reason error msg is coming.

In ASA when we configure route we need to tell outgoing interface for ex.

route inside x.x.x.x x.x.x.x

So while configuring 2nd command of yours makes ASA confusing what would be the outgoing interface for this traffic.

Thanks

Ajay

2 REPLIES

ASA Dynamic Routing and Static NAT

This is not possible routing for subnet 192.168.1.0/24 will only point to one interface  inside1 or inside 2. Thats the reason error msg is coming.

In ASA when we configure route we need to tell outgoing interface for ex.

route inside x.x.x.x x.x.x.x

So while configuring 2nd command of yours makes ASA confusing what would be the outgoing interface for this traffic.

Thanks

Ajay

New Member

ASA Dynamic Routing and Static NAT

Thanks Ajay,

Then what is the point of having dynamic routing capability in ASA?

Regards.

Chuan

650
Views
0
Helpful
2
Replies
CreatePlease login to create content