Try this:
nat (outside) 1 access-list 101 outside
Youre missing the "outside" keyword.
Regards.
________________________________
From: Adil Pasha <[email protected]>
To: Fawad Khan <[email protected]>
Cc: CCIE Security Maillist <[email protected]>
Sent: Sunday, August 7, 2011 6:00 PM
Subject: Re: [OSL | CCIE_Security] NAT (outside)?
Thanks Fawad,
It does accept the config but it does not work though.
This is the first time I am using nat (outside) which I saw in IPX lab 17.
Best Regards.
______________________
Adil
On Aug 7, 2011, at 12:46 PM, Fawad Khan wrote:
I am sure, this is just a warning, it must have accepted the configuration. do
a show run nat and show run global and find it out.
>
>Usually even the firewall assumes that one will use nat inside and global
>outside.
>
>
>my two cents.. good luck.
>
>FNK
>
>On Sun, Aug 7, 2011 at 12:04 PM, Adil Pasha <[email protected]> wrote:
>
>My ASA already has nat (inside) 1 access-list 101 configured.
>>
>>When I try to configure nat(outside) with global (inside) I get the following
>>error:
>>
>>ASA1(config)# global (inside) 1 10.22.22.202
>>INFO: Global 10.22.22.202 will be Port Address Translated
>>ASA1(config)#
>>ASA1(config)# nat (outside) 1 access-list 101
>>WARNING: Binding inside nat statement to outermost interface.
>>WARNING: Keyword "outside" is probably missing.
>>ASA1(config)#
>>
>>Is it because we can ONLY have either nat (inside) or nat (outside) in one
>>time or can we have both at the same time?
>>
>>If we can have both at the same time then why am I getting the above error?
>>
>>By the way, if I use static (outside,inside) command it works and I can
>>achieve the NAT goal.
>>
>>Best Regards.
>>______________________
>>Adil
>>
>>_______________________________________________
>>For more information regarding industry leading CCIE Lab training, please
>>visit www.ipexpert.com
>>
>>Are you a CCNP or CCIE and looking for a job? Check out
>>www.PlatinumPlacement.com
>>
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
