04-04-2012 05:44 AM - edited 03-11-2019 03:50 PM
Hi there.
I have this very strange problem. Can someone explain me why this is happening? I have two static. One of them is working fine. But the another seems to go thoug diffrent interface (mynoc).
Config:
static (dmz,outside) AA AB netmask 255.255.255.255
static (dmz,outside) AAA ABB netmask 255.255.255.255
Pacet trace result
This one is chosing wrong interface?
Phase: 8
Type: NAT
Subtype:
Result: ALLOW
Config:
static (dmz,outside) AA AB netmask 255.255.255.255
nat-control
match ip dmz host AB outside any
static translation to AA
translate_hits = 561, untranslate_hits = 0
Additional Information:
Static translate AB/0 to AA/0 using netmask 255.255.255.255
Phase: 9
Type: NAT
Subtype: host-limits
Result: ALLOW
Config:
static (dmz,mynoc) AA AA netmask 255.255.255.0
nat-control
match ip dmz AB 255.255.255.0 dnoc any
static translation to AB
translate_hits = 833229, untranslate_hits = 189
Additional Information:
This one is working fine:
Phase: 8
Type: NAT
Subtype:
Result: ALLOW
Config:
static (dmz,outside) AAA ABB netmask 255.255.255.255
nat-control
match ip dmz host ABB outside any
static translation to AAA
translate_hits = 10882, untranslate_hits = 99015
Additional Information:
Static translate ABB/0 to AAA/0 using netmask 255.255.255.255
Phase: 9
Type: NAT
Subtype: host-limits
Result: ALLOW
Config:
static (dmz,outside) AAA ABB netmask 255.255.255.255
nat-control
match ip dmz host ABB outside any
static translation to AAA
translate_hits = 10882, untranslate_hits = 99015
Additional Information:
04-04-2012 05:51 AM
Hi,
You seem to have two conflicting static:
static (dmz,mynoc) AA AB netmask 255.255.255.0
static (dmz,outside) AA AB netmask 255.255.255.255
Can you please let me know which one is correct, because the first one has a mask of /24
Varun
04-04-2012 05:57 AM
Sorry my mistake.
This one is correct one.
static (dmz,mynoc) AA AA netmask 255.255.255.0
static (dmz,outside) AB AA netmask 255.255.255.255
Do you have any idea?
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: