Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Cisco ASA NAT Error

Hi,

In my ASA I am getting some error when I want to configure static NAT and NAT exempt configuration. I think Some miss configuration has been done.

The error msg given below..

Firewall-ASA-02(config)# static (inside,outside) x.x.x.12 10.138.77.54 netma$

INFO: Global address overlaps with NAT exempt configuration

Firewall-ASA-02(config)# no access-list nonat extended permit ip 10.138.77.0 255.$

INFO: Outside address overlap with static NAT configuration

Plz help to reslove this issue..why i am getting this type of error msg.

Regards,

som

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Cisco ASA NAT Error

as i see ur config the following line not sure if u need it if not try to REMOVE it and let me know

access-list nonat extended permit ip any 10.138.77.192 255.255.255.224

i think the following one too, !

access-list nonat extended permit ip any 10.138.74.64 255.255.255.192

good luck and let me know

9 REPLIES

Re: Cisco ASA NAT Error

can u post ur nat config or show run ?

New Member

Re: Cisco ASA NAT Error

Plz find the configuration in the attachment,

your help would be appreciated....

Regards,

som

Re: Cisco ASA NAT Error

ok

now with these config dose the ASA working ok?

and when u get this errors?

can u put the lines that u wanna add and u getting errors when adding them

New Member

Re: Cisco ASA NAT Error

Hi,

I am getting error whnever I try to add a new STATIC NAT and NAT EXEMPT.

plz find the eeror msg..

Firewall-ASA-02(config)# static (inside,outside) x.x.x.25 10.138.77.62 netmask 255.255.255.255

INFO: Global address overlaps with NAT exempt configuration

INHYD-ASA-02(config)#access-list nonat extended permit ip 10.138.77.0 255.255.255.0 10.10.15.0 255.255.255.0

INFO: Outside address overlap with static NAT configuration

Regerds,

som

Re: Cisco ASA NAT Error

as i see ur config the following line not sure if u need it if not try to REMOVE it and let me know

access-list nonat extended permit ip any 10.138.77.192 255.255.255.224

i think the following one too, !

access-list nonat extended permit ip any 10.138.74.64 255.255.255.192

good luck and let me know

New Member

Re: Cisco ASA NAT Error

Hi

I have removed this two lines but same error msg coming.I am getting the same error msg during removing aslo and after removing when tried to add a new exempt.

Re: Cisco ASA NAT Error

remove them

save ur config

reload then try again

u have to reload after changing nat and nat policies

New Member

Re: Cisco ASA NAT Error

Hi,

Thanx!

Its working now without error.

Regards,

som

Re: Cisco ASA NAT Error

iam glad it working :)

757
Views
0
Helpful
9
Replies
CreatePlease login to create content