Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
You may experience some slow load times, errors, and slight inconsistencies. We ask for your patience as we finalize the launch. Thank you.

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Can a static NAT entry fall within a global range? Post 8.3

I have a customer that was running 8.2 and we upgraded to 9.x. Now some web servers are not accessible.

Dynamic NAT:

object network obj-5.5.5.150-5.5.5.200
 range 5.5.5.150 5.5.5.200

 

nat (CORE,INTERNET) source dynamic obj-172.20.0.0 obj-5.5.5.150-5.5.5.200

 

Static NAT:

object network h172.20.60.196_CORE-INTERNET
 host 172.20.60.196

object network h172.20.60.196_CORE-INTERNET
 nat (CORE,INTERNET) static 5.5.5.196

 

I plan to clean all this up and have all the dynamic PAT to the outside interface. What I would like to know is can this static nat fall within the pool range and still work? This worked in 8.2. After the upgrade it does not work.

 

Thanks,

 

Steven

 

 

  • Firewalling
1 REPLY
New Member

I was able to make the

I was able to make the changes the evening that I posted this.

 

As soon as I got rid of the global ranges and used a single IP it started working.

 

I use (any,internet) to a x.x.x.41 and the other statics started working.

27
Views
0
Helpful
1
Replies