ASA9.1 how to use route-lookup instead of "NAT-lookup" for egress interface on non-identity NAT

Hi,
I have an ASA firewall with three interfaces, inside, outside and Link.
I have a situation where I need the ASA to perform the following nat rules:
from "Inside" to "Link" - any source to destination 192.168.51.0/24 - translate source to 10.0.0.19
from "inside" to "outside" - any source to any destination - translate source to "interface" (internet navigation)
from "inside" to "outside" any source to 192.168.51.0/24 - translete source to 10.0.0.17
This is what I am trying to get working:
nat (any,TEF) source dynamic any 130.130.0.19_nat destination static obj_192.168.51.0 obj_192.168.51.0
nat (any,outside) source dynamic any 130.130.0.17_nat destination static obj_192.168.51.0 obj_192.168.51.0
The problem is that the "outside" route to 192.168.51.0 is an alternative route over a VPN tunnel. I'm using sla monitor, so when the "Link" interface is out, the route table changes the network 192.168.51.0/24 to be reachable over the outside interface. but ASA is using the NAT rule to perform "egress interface lookup" instead of route-lookup.
I know about the command route-lookup on the NAT configuration, but I need to translate the source address and when I try to use the route-lookup command I get an error message:
ERROR: Option route-lookup is only allowed for static identity case
Anybody has some suggestion?
Thanks

Hi Julio,
Thank you for the reply.
It didn't work either.
Here are the options I get when I use the specific interfaces (using "source dynamic"):
configure mode commands/options:
  description  Specify NAT rule description
  inactive     Disable a NAT rule
  net-to-net   Net to net mapping of IPv4 to IPv6
  service      NAT service parameters
If I try to use source static:
 nat (inside,TEF) source static inside_nat 130.130.0.19_nat destination static obj_192.168.51.0 obj_192.168.51.0 route-lookup
ERROR: Option route-lookup is only allowed for static identity case

Similar Messages

  • How to use the selection profile and status profile for production order?

    Hi expert,
       I want to know how to use the selection profile and status profile for production order. what's the usage for these two selection profile and status profile ?
      Please help me.
      thanks in advance.
      george.shi

    Hi George,
    There are are two types of statuses.One is system status and second one is user status.These statuses will tell us current situation of an order.
    We can't change system statuses.But we can create our own statuses through status profile.With this profile we can control user statuses.
    In this status profile,
    1.We define the sequence in which user statuses can be activated,
    2.We define initial statuses
    3. Allow or prohibit certain business transactions.
    Selection profiles are used to select the objects (say production orders) with different status combinations.We assign status profiles to selection profiles in BS42 T-Code.
    Regards,
    Raja.
    Edited by: Rajarao on Oct 30, 2008 6:21 AM
    Edited by: Rajarao on Oct 30, 2008 6:22 AM

  • How to use BAPI to add a new version for a claim number in WTY transaction.

    How to use BAPI to add a new version for a claim number in WTY transaction.
    I am using  function module " BAPI_WARRANTYCLAIM_ADD_VERSION ".
    It needs to copy all contents of previous version to a new version.
    While doing so i am unable to copy fields like valic valoc etc. Any ways by which  i can copy this values.
    WTY will update PNWTYH , PNWTYV and PVWTY tables.
    Thanking you,
    Lokesh.

    Hi Vishnu,
    You can do that through EEWB. Please go through SAP Note 484597. You would get the details of using Easy Enhancement Work bench.
    Rewards point if you think this info is useful
    Regards,
    Dipender Singh

  • HT1343 how to use the options with F10, F11, F11 for turning the sound up or down or mute?

    Hi, I'm Hannah. I'm using a Mac. Can you show me how to use the options with F10, F11, F12 for turning the sound up, or down or mute? Thank you very much

    Normally simply pressing them should do what you want, F10 to mute; F11 to decrease volume; F12 to increase volume. However, it's possible that you have a box ticked in Keyboard preferences which modifies the behaviour of the keys, requiring you to also hold down the Fn key (bottom left key on the keyboard) to enable the function.
    Check System Preferences>Keyboard to makes sure the box indicated in the image isn't ticked.

  • I got a software license crtificate ,how to use it??? i   paied    for it.

    I got a software license crtificate ,how to use it??? i   paied    for it.

    Which program, and where did you buy?
    Do you have a redemption code?
    Redemption Code http://helpx.adobe.com/x-productkb/global/redemption-code-help.html

  • How to use URL class instead of Socket

    Hi all. I am developing a small inventory control system for a warehouse.
    I am suing a Java desktop application that connects to a servlet via Internet.
    I have been searching the net how to use JSSE for my application since i am new to secure sockets and JSSE.
    Since I havent implemented security In my current system yet, i am using URLConnection conn = url.openConnection(); to connect to a servlet.
    However, in a good tutorial that I found about JSSE, sockets are used directly for connection, insted of URLCOnnection. They use the code like this: SSLSocketFactory sf = sslContext.getSocketFactory();
    SSLSocket socket = (SSLSocket)sf.createSocket( host, port ); Since, using sockets is overly complex for me, I want to make use of the URLConnection class instead to keep it simple.
    Could anyone please tell me how to make use of the URLConnection class to establish secure http connection.
    by the way, the tutorial is here:
    http://www.panix.com/~mito/articles/articles/jsse/j-jsse-ltr.pdf
    thanks.

    Here you go. The following code snippet allows you post data to http URL. If you have to do the same to https URL , please let me know.
    OutputStream writeOut = null;
    HttpURLConnection appConnection = null;
    URL appUrlOpen = null;
    //data to be posted.
    String data = "This is the test message to post";
    byte[] bytesData = this.data.getBytes();
    appUrlOpen = new URL(""Your Servlet URL");
    appConnection = (HttpURLConnection) appUrlOpen.openConnection();
    appConnection.setDoOutput(true);
    appConnection.setDoInput(true);
    appConnection.setUseCaches(false);
    appConnection.setInstanceFollowRedirects(false);
    appConnection.setRequestMethod("post");
    appConnection.setRequestProperty("Content-Type","application/text");
    appConnection.setRequestProperty("Content-length", String.valueOf(bytesData.length));
    writeOut=appConnection.getOutputStream();
    writeOut.write(bytesData);
    writeOut.flush();
    writeOut.close();
    String inputLine;
    StringBuffer sb = new StringBuffer();
    reader = new BufferedReader(new InputStreamReader(appConnection.getInputStream()));
    char chars[] = new char[1024];
    int len = 0;
    //Write chunks of characters to the StringBuffer
    while ((len = reader.read(chars, 0, chars.length)) >= 0)
    sb.append(chars, 0, len);
    System.out.println("Response " + sb.toString());
    reader.close();
    sb=null;
    chars = null;
    responseBytes = null;
    ******************************************************************************************

  • How to use Spring MVC instead of assembler.jsp in endeca 3.1.0

    Hi ,
    I am new to Endeca . I want to use spring MVC instead of assembler.jsp .Some body please help
    me how can i do it. Wht all i have to do to achieve it.
    Thanks
    Mark

    Hi Mark,
    When using the 3.1 Assembler in your application, you can use either the jar file directly or set up the Assembler as an HTTP service and process the XML or JSON responses. Neither of these approaches conflicts with using Spring in your application.
    Sean

  • How to use "Routing Table" option in Proxy service in OSB ?

    Hi,
    I have created Business and Proxy services in my OSB console. I have used "Custom Query" option while creating the Database Adapter and I'm passing one input parameter to the query. My input parameter is "Name".
    Based on the input values for this parameter, I need to pass a corresponding values to the query. For example, If I pass the following values to "Name" input parameter (India) I need to pass "Value1" to my query -
    India --> Value1
    China --> Value2
    America --> Value3
    To achieve this requirement, I have used "Routing Table" option. I have specified the values as follows -
    Expression - $body/fet:FetchCustDataInput/fet:Name
    Operator- '='
    Compare value - India
    Service - "My Webservice"
    Operaton- "My Service Operation"
    In the "Request Actions:" I have added the "Add an Action --> Messaging Processing --> Replace" and provided the following values -
    Replace <XPath> = $body/fet:FetchCustDataInput/fet:Name
    in Variable = "Name"
    with Expression = xs:string('Value1')
    and selected "Replace node contents" option.
    No validation errors I faced. I have created the Routing table in Proxy service. But when I try to execute the proxy service in my Test Console, I get the following error message -
    "The invocation resulted in an error: Unknown error while processing message for service ProxyService OSBQueryService/FetchByCustomQuery/FetchByCustomQueryPS."
    I have even enabled "Direct call" and "Include Tracing" options as well. The message under "Tracing" give "(echoing request)
    Routed Service. No Service has been invoked, the request is echoed.".
    Can anyone please help me to resolve this issue.
    Thanks in Advance,
    Udaya

    Did you put any loggers in the proxy at request pipeline prior to route node ? Can you trace if the request has entered request pipeline aleast.
    If not just check the transport headers under the request window in the test console. There should be a text box for entering username/password which should be left blank. I have faced this unknown exception from test console in some browsers where an incorrect username/password used to get populated here. Check this ..
    Edited by: atheek1 on Jul 22, 2010 2:02 AM

  • How to use partition by instead of group by?

    Hi,
    I am having trouble using partition by clause in following case,
    column other_number with null values contains 10 records in 'some_table'
    5 records with date 11-01-2009, item_code = 1
    5 records with date 10-01-2009, item_code = 2
    This query returns all 10 records, (which suppose to return 2)
    SELECT count (a.anumber) over (partition by TO_char(a.some_date,'MM'), a.item_code) AS i_count, a.item_code,
    TO_char(a.some_date,'MM')
         FROM some_table
         WHERE to_char(a.some_date,'yyyy') = 2009
         AND a.other_number IS NULL
    Works fine if I wrote like this,
    SELECT count (a.anumber) AS i_count, a.item_code,
    TO_char(a.some_date,'MM')
         FROM some_table
         WHERE to_char(a.some_date,'yyyy') = 2009
         AND a.other_number IS NULL
    group by TO_char(a.some_date,'MM'), a.item_code
    How to use partition by in this case?

    Hi,
    Almost all of the aggregate functions (the ones you use in a GROUP BY query) have analytic counterparts.
    You seem to have already discovered that whatever values are returned by
    an aggregate funcition using "GROUP BY x, y, z" can also be found with
    an analytic function using "PARTITION BY x, y. z".
    Aggregate queries collapse the result set.
    The aggregate COUNT function:
    SELECT    deptno
    ,         COUNT (*)   AS cnt
    FROM       scott.emp
    GROUP BY  deptno
    ;tells how many of the 14 employees are in each of the 3 departments.
    So does the analytic COUNT function:
    SELECT    deptno
    ,         COUNT (*) OVER (PARTITION BY deptno)   AS cnt
    FROM       scott.emp
    ;but the first query produces 3 rows of output, the second query produces 14.
    You could get 3 rows of output using the analytic function and SELECT DISTINCT , but it's inefficient.
    Which should you use? Like so many other things, the answer depends on what data you have, and what results you want from that data.
    If you want collapsed results (one row per group), that's a striong indication that you'll want aggregate, not analytic functions.
    If you want one row of output for every row in the table, that's a strong indication that you'll want analytic functions.
    If you have a particular question, ask it. Post some sample data and the results you want from that data, as Rob said.
    There is another important difference between aggreate and analytic functions: analytic functions can easily be restricted to a window , or subset, of the data set. This is something like a WHERE clause, but a WHERE clause applies to the whole query: a wondowing condition applies only to an individual row.
    If you need to compute a SUM of rows with an earlier order_date than this row or an average of the last 5 rows, then you proabably want to use analytic function.

  • How to use an instance instead of the class itself

    I am building a program but have a problem.
    My program uses a controller class which instantiates a World-class. In the world class has a Vector I make a Vector in which I place all the elements in the world. (I also made an Element class from which all the objects that I put into this Vector extend.)
    Everything except for some methods in the controller class are declared public. I might need to use static, but I do not know how.
    // CONSTRUCTOR CONTROLLER CLASS
    world = new World ();  // instantiate one and only one world
    world.newElement (new Beamer ("beamer", 20. , 20.));  // use a selfwritten method to add a "Star Trek"-like
                              // beamer to the world. I give it a name and position.
    world.newElement (new Avatar ("avt", "beamer"));  // add an avatar which is "beamed up". so what I do is that I use the beamer for the beginposition of the avatar. However, and this is my problem, in the constructor of Avatar (see below) i need the beamer in world, but my compiler cant find world. I probably need to import my World or controller class, but even then: I do not understand how to use an instance (world is an instance. I cant use the World-class as the class does not contain the beamer element)
    public class Avatar extends Element {
         public Avatar (String n, String beamer){
              name = n;
              posx = world.named("beamer").getPosx; // the selfwritten method named finds the
                // element in the Vector that goes with the name. Any ideas to make this code better are welcome too.
              posy = world.named("beamer").getPosy;
    } Any ideas on how to solve this (common) problem in good coding are most welcome.

    I think you are best off if you use static methods and static fields only in your World class. That way you don't have to instantiate it and everyone has access to its methods. This would be then completely analogous to how you access methods and fields of the well-known class System (e.g. when you use System.out.println). This also has the advantage that you are guaranteed to have only one copy of the World.
    Here is an example of how your World class, Avatar class and main code would look like.
    Main code: (note the use of capital W in the name World, referring to class rather than instance).
    // no need to instantiate World, as we call its static methods only
    World.newElement (new Beamer ("beamer", 20. , 20.));
    World.newElement (new Avatar ("avt", "beamer"));  // add an avatar which is "beamed up". World class: (note the static keyword in front of the vector and the methods)
    public class World {
      private static Vector v;       // static field, only one copy of it ever exists
      public static void newElement(Element e)   // static method, can call without instantiating world
         v.addElement(e);
      public static Element named(String n)  // use to look up elements
         ... some code which goes through v and finds element named "n" ...
         ... return reference to that element ...
    }and finally the Avatar: (again note the use of reference to World as a class rather than instance)
    public class Avatar extends Element {
         public Avatar (String n, String beamer){
              name = n;
              posx = World.named("beamer").getPosx;
              posy = World.named("beamer").getPosy;
    } The above example is how I would implement it when you don't actually need instances of the World class.

  • How to use routing service property value in xsl

    Hi All,
    I need to use routing service's property value in xsl.
    I created routing service in esb project. after routing rules, thare is properties. In properties I added name as "propval" and value as "required".
    I need to use value of propval in one of our xsl.
    Can you please suggest on this.
    I am using soa suite 10.1.3.4.0
    Thanks in advance.
    Edited by: vikky123 on May 2, 2010 1:36 AM

    Hi All,
    Right now i wud be starting working on BPEL in my project.
    I wud be working on XSLT in BPEL.
    I started from the basic things i.e the tutorial given on,
    http://www.oracle.com/technology/pub/articles/matjaz_bpel1.html
    But i was not getting which software to download from the link given below, for working on XSLT.I am a Java developer by profession and windows would be the operating system for that,
    http://www.oracle.com/technology/software/products/ias/bpel/index.html
    Kindly let me know, from where to start to get the basics right.
    Additional to it, whether i need to undergo the training for it.
    I got a course material for learning BPEL from a coaching institute site.Kindly view it....
    http://soatraining.hpage.com/oracle_soa_bpel_esb_training_82839535.html
    Wud it be sufficient...I mean wud i be able to learn it from internet without taking options of coaching.
    Kindly help me out.
    Thanks&Regards
    Sanket
    Edited by: user13096574 on May 9, 2010 9:55 PM

  • How to use more than one indirect valuation module for the same wage type

    Is it possible and how to use the u201CIndirect valuation based on master data: ICOMPu201D configuration to default the NUMBER and at the SAME TIME to use u201CDefine valuation of base wage types usingu201D to default the AMOUNT from one/two WTs ?

    You can use the the same wage type for both number and amount but you can't assign 2 indirect valuation method for the same wage type at 1 time. I would rather suggest you to go for some customer specific indirect valuation instead of the standard one. You can use BAdI HR_INDVAL for the same.

  • I do not know how to use i cloud. or i tunes anymore for that matter. can someone help me?

    I had not updated my Itunes in a while. when i got my mac i updated it to the latest version and i guess i set up i cloud but I have no idea how to use it. i have 1163 songs in my itunes library but they literally only show up some times and others they dont. it says i have all those songs in my music library on my phone but then half of them dont play and i dont understand why? most of my songs have a little cloud next to them like they need to be downloaded but i dont understand????
    I just want all my music on my phone.
    my phone also cant back up to icloud becase there is no storage but i have 3 backups under my back up and i dont know what to do? i lost my phone recently and i think it still has my old back up but i dont wanna delete that one cause im scared its gonna delete everything and i just really dont know what to do.
    does anyone know if im doing something wrong or what i can do to back up to my old back up or what?
    my contacts also always change names. or i put a number in my phone and it literally disappears 2 minutes later. ill save the number again and it does it again but then i look back in a ciuple of weeks and i have 4 of the same contact. its very frustrating

    Did you enable the "Find my..." function BEFORE you lost it?

  • How to use a subreport field as selection criteria for the main report

    Dear All,
       I created a report with one subreport and im comparing information from both reports but i need to apply selection criteria in the main report using one of the fields in the subreport, the problem is that the subreport field doesnt appear in the select expert screen. By any chance, someone knows how make a subreport field be used by the select expert.
    Thanks,
    Martha Medrano

    Dear Dom,
       I created the subreport table called IIM (748 items) in sql in the main report as you suggested with the below code:
    SELECT "IIM"."IPROD", "IIM"."IDESC", "IIM"."IID"
    FROM   "S102F360"."BPCS405CDF"."IIM" "IIM"
    WHERE   NOT ("IIM"."IDESC" LIKE 'GEN%' OR "IIM"."IDESC" LIKE 'OBS%') AND "IIM"."IID"<>'IZ' AND "IIM"."IPROD" LIKE '3%'
    and i have another table called ITEM_MASTER (3221 items):
    SELECT "ITEM_MASTER"."ITEM_ID", "ITEM_MASTER"."DESCRIPTION"
    FROM   "WHSPRO"."dbo"."ITEM_MASTER" "ITEM_MASTER"
    ORDER BY "ITEM_MASTER"."ITEM_ID"
    and im trying to display all items in the ITEM_MASTER table that are not in the IIM file but i haven't been able to accomplish this, i am using as primary the ITEM_MASTER table with 'Inner Join' as Join Type,  and '!=" as Link Type. Do you have any ideas on how can i display the requested items.
    Thanks for your help

  • Is there an app i can download for a ipod touch 4 that uses your camera instead of your screen for a flashlight

    is there an app i can download for an ipod touch 4 that uses your camera instead of your screen

    Since the iPod touch doesn't have an LCDflash like the iPhone any app that would turn on the LCD flash on the iPhone into a "flashlight" wouldn't work with the iPod.

Maybe you are looking for

  • Option keys no longer working!

    Can any experienced user provide a solution for this seemingly simple problem? Since I upgraded to 10.6.8, my keyboard (first slim version, extended) option keys are dead. All other keys seem to be working normally. Here are just a few problems assoc

  • Why doesn't Adobe Reader XI load when viewing online PDFs?

    This is probably a stupid question, but I noticed something odd last night.  I have Adobe Reader 9 on my netbook and Adobe Reader XI on my main computer.  I had been browsing some online PDF files on my netbook, and in Adobe Reader 9 I get the Reader

  • Save File on Flash without delete last one with EEM

    Hi. I trying to configure an EEM for save the "ip cache flow" on Flash memory, but when the threshold is reached repeatedly the last file saved is "overwrite"... I need save a copy for every event. Somebody could help me please, its a little urgent  

  • How can I manually type in an IP address instead of a URL in Safari?

    Hopefully everyone knows about this DNS server hacking scheme that is able to hack a DNS server and send millions of unwitting web surfers to cloned websites. If this was a bank a hacker could potentially clone a website to perfection except for the

  • Keyboard shortcut missing?

    I use keyboard shortcuts a lot and apple+1 for opening and closing the iTunes window was one I used a lot. In iTunes 7, that seems to be missing, or maybe I can't find it in the help file... anyone know that could help? Thanks Sami