Re: ASA Static NAT and ACL

From: Anderson Mota Alves (mota.anderson@gmail.com)
Date: Wed Apr 09 2008 - 10:03:11 ART


Hi Kim,

There is some line missing from your configuration, tell me what do you have
in the line global (outside) 1 x.x.x.x (I suppose your line should looks
like this)...
Probably you are trying to do a PAT and maybe in your scenario NAT exempt
would be desirable to get some traffic untranslated..
An easy way to check in my opinion is to enable logging console and then
permit icmp in your outside acl and enable debug for icmp trace "debug icmp
trace"
when doing a ping from outside you should see if translation is working fine
also send us the show xlate.

HTH,

Anderson Mota Alves
CCIE3 #16778 (R/S, SP and Security)
Technical Instructor
http://www.netmetric-solutions.com



This archive was generated by hypermail 2.1.4 : Thu May 01 2008 - 08:25:50 ART