Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Needs help on NAT

global (outside) 2 interface

nat (inside) 2 access-list dmz

access-list dmz permit ip 21.21.0.0 255.255.0.0

nat (inside) 0 0.0.0.0 0.0.0.0

static(inside,outside) 3.3.3.0 3.3.3.0 netmask 255.255.255.0

static(inside,outside) 3.3.4.0 3.3.4.0 netmask 255.255.255.0

.......

The problem here is I am unable to translate the 21.21.0.0 network to its global interface address.

Is the nat (inside) 0 0.0.0.0 0.0.0.0 the cause for not able to translate? Is it safe to remove this command?

thanks,

  • Firewalling
1 REPLY

Needs help on NAT

Hello Kope,

Yes, that is the cause of the issue, please remove it!

Removing this you will start making translation from the inside of your ASA, that is all that is going to change.

Regards,

Do rate helpful posts

Julio

Looking for some Networking Assistance? Contact me directly at jcarvaja@laguiadelnetworking.com I will fix your problem ASAP. Cheers, Julio Carvajal Segura http://laguiadelnetworking.com
219
Views
0
Helpful
1
Replies