Add "outside" keyword at the end as the warning states. With Dynamic NAT configured for outbound traffic you'll probably hit RPF check error so you need to exclude the returning traffic from translation (NAT exempt).
Regards, Piotr 2011/8/7 Adil Pasha <[email protected]> > Thanks Fawad, > > It does accept the config but it does not work though. > > This is the first time I am using nat (outside) which I saw in IPX lab 17. > > > Best Regards. > ______________________ > Adil > > On Aug 7, 2011, at 12:46 PM, Fawad Khan wrote: > > I am sure, this is just a warning, it must have accepted the configuration. > do a show run nat and show run global and find it out. > > Usually even the firewall assumes that one will use nat inside and global > outside. > > > my two cents.. good luck. > > FNK > On Sun, Aug 7, 2011 at 12:04 PM, Adil Pasha <[email protected]> wrote: > >> My ASA already has nat (inside) 1 access-list 101 configured. >> >> When I try to configure nat(outside) with global (inside) I get the >> following error: >> >> ASA1(config)# global (inside) 1 10.22.22.202 >> INFO: Global 10.22.22.202 will be Port Address Translated >> ASA1(config)# >> ASA1(config)# nat (outside) 1 access-list 101 >> WARNING: Binding inside nat statement to outermost interface. >> WARNING: Keyword "outside" is probably missing. >> ASA1(config)# >> >> Is it because we can ONLY have either nat (inside) or nat (outside) in one >> time or can we have both at the same time? >> >> If we can have both at the same time then why am I getting the above >> error? >> >> By the way, if I use static (outside,inside) command it works and I can >> achieve the NAT goal. >> >> Best Regards. >> ______________________ >> Adil >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> Are you a CCNP or CCIE and looking for a job? Check out >> www.PlatinumPlacement.com >> > > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
