09-20-2006 12:59 PM - edited 02-21-2020 01:11 AM
I have configured the ASA backup interface command to the specs on the website below. The problem isnt that the ASA is failing over but it's not allowing my internal users to get out once the backup interface comes online. I am able to reach it via ssh outside, etc. I tried adding additional nat and global statements that corresponding to the backup interface but i dont see that anywhere on the documentation. thanks.
nat (inside) 1 0.0.0.0 0.0.0.0
nat (backup) 2 0.0.0.0 0.0.0.0
global (OUTSIDE) 1 interface
global (backup) 2 interface
09-26-2006 11:13 AM
What version of software are you using in the ASA box ?.
09-27-2006 06:30 AM
7.2(1)
09-26-2006 04:37 PM
Hi Try this ..
nat(inside) 1 0 0
global (outside) 1 interface
nat (inside) Y 0 0
global (backup) Y interface
where Y is any nat-id number that you are not already using on your nat/global statements .. ie ..
nat (inside) 30 0 0
global (backup) 30 interface
I hope it helps .. please rate it if it does !!!
09-27-2006 06:30 AM
hey this is the message i get with this..
GAUNTLET(config)# nat (inside) 5 0.0.0.0 0.0.0.0
Duplicate NAT entry
it takes the global statement fine.
i am using ver 7.2(1)
thanks for the reply, any other ideas?
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: