Translation Group Error

[adcorbett_2]

Hello - I was wondering if someone could tell me why I get this error in my syslog from my ASA 5520:

3|Jul 02 2008 08:00:43|305005: No translation group found for udp src Inside:MAILBOX/49572 dst Inside:192.168.200.19/1176

I see it quite a bit. The 192.168.200.X address is the address pool for VPN users, and MAILBOX is our exhange server. I have a static route set up for MAILBOX (static (Inside,outside) X.X.X.X MAILBOX netmask 255.255.255.255) so I don't understand why I get this error. Thanks!

[ggilbert]

According to the syslog, it seems that the UDP traffic is coming in from the inside interface and going to the inside interface.

Questions:

Which interface on your ASA does terminate the VPN clients?

What is the internal network IP address range?

I see that the VPN users are getting IP address in the range 192.168.200.x -

Do you have NAT exemption configured?

Can you send me the output of "sh run nat" from the ASA.

Thanks

Gilbert

[adcorbett_2]

Aha - it was the NAT exemption - just configured that and these errors stopped. Thanks!

[ggilbert]

Awesome. Good to know that it is solved.

Rate this post, if it helped.