Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Cisco ASA 5510 Objeck IP Bloked when I use inside ip address

Hello,

I have a ASA 5510 and I want to provide a rule for exchange ,
All user want to access to internet
I want to create a rule while I provide a object and  in object ip address bloked by asa,

Because users use its ip address at same time.

can you help me please. whan I can I do,

5 REPLIES
Cisco Employee

Re: Cisco ASA 5510 Objeck IP Bloked when I use inside ip addres

For mail, you need to remove the following static NAT statement as it is incorrect:

static (outside,inside) mailsrv mail netmask 255.255.255.255

After removing the above, please "clear xlate".

Can you please advise what is actually not working? Inbound mail not working? Outbound mail not working?

Community Member

Re: Cisco ASA 5510 Objeck IP Bloked when I use inside ip addres

Hi Jennifer,

when ı remove the  this line what will I do?

static (outside,inside) mailsrv mail netmask 255.255.255.255


can you provide correct config line for me  please.?

Thank You,

Cisco Employee

Re: Cisco ASA 5510 Objeck IP Bloked when I use inside ip addres

You already have the correct static NAT statement configured:

static (inside,outside) mail mailsrv netmask 255.255.255.255

So there is no other line that needs to be configured except removing the static NAT advised earlier.

Community Member

Re: Cisco ASA 5510 Objeck IP Bloked when I use inside ip addres

Thanks,

Excuse me, I could not understand

I must remove this line, Are you  sure ?

static (outside,inside) mailsrv mail netmask 255.255.255.255

is this line enough  NAT rule for e-mail traffic  outside and inside ?

Cisco Employee

Re: Cisco ASA 5510 Objeck IP Bloked when I use inside ip addres

Yes, this line: static (inside,outside) mail mailsrv netmask 255.255.255.255

is enough because that line works bidirectionally, ie: both for outbound and inbound.

312
Views
0
Helpful
5
Replies
CreatePlease to create content