NAT Does Not Appear to Be Working with ASA 8.4(2)
I've recently been tasked with providing access to several internal servers to a remote site via one of our ASAs. In order to keep things simple, I have begun by creating a single static NAT rule for one of the servers. The Site-to-Site VPN connection profile was then created and testing has begun. Unfortunately it looks as though the NAT rule isn't working. As I monitor the tunnel, I still see our internal number being broadcasted and not the mapped address, which prevents the tunnel from being established. The remote site has verified that this is what they are seeing too.
Appliance:
ASA 5510
ASA 8.4(2)
ASDM 6.4(5)
Address Legend:
(Note: The following addresses are not actual addresses.)
188.0.0.69 = Remote site peer address
188.1.1.69 = Remote site computer
20.0.0.106 = Internal computer real address
20.1.0.106 = Mapped address
99.0.0.100 = Our peer address
NAT Rule:
object network 20.0.0.106
nat (Inside,Outside) static 20.1.0.106 service tcp 204 204
Log Sample:
5|Aug 11 2011|16:30:48|713041|||||IP = 188.0.0.69, IKE Initiator: New Phase 1, Intf Inside, IKE Peer
188.0.0.69 local Proxy Address 20.0.0.106, remote Proxy Address 188.1.1.69, Crypto map (Outside_map)
6|Aug 11 2011|16:30:48|302015|99.0.0.100|500|188.0.0.69|500|Built outbound UDP connection 989639 for
Outside:188.0.0.69/500 (188.0.0.69/500) to identity:99.0.0.100/500 (99.0.0.100/500)
6|Aug 11 2011|16:30:49|713172|||||Group = 188.0.0.69, IP = 188.0.0.69, Automatic NAT Detection Status:
Remote end is NOT behind a NAT device This end is NOT behind a NAT device
6|Aug 11 2011|16:30:49|113009|||||AAA retrieved default group policy (Remote_Site_Policy) for user = 188.0.0.69
5|Aug 11 2011|16:30:49|713119|||||Group = 188.0.0.69, IP = 188.0.0.69, PHASE 1 COMPLETED
5|Aug 11 2011|16:30:49|713068|||||Group = 188.0.0.69, IP = 188.0.0.69, Received non-routine Notify
message: Invalid ID info (18)
5|Aug 11 2011|16:30:49|713050|||||Group = 188.0.0.69, IP = 188.0.0.69, Connection terminated for peer
188.0.0.69. Reason: Peer Terminate Remote Proxy 0.0.0.0, Local Proxy 0.0.0.0
3|Aug 11 2011|16:30:49|713902|||||Group = 188.0.0.69, IP = 188.0.0.69, Removing peer from correlator
table failed, no match!
5|Aug 11 2011|16:30:49|713259|||||Group = 188.0.0.69, IP = 188.0.0.69, Session is being torn down.
Reason: User Requested
4|Aug 11 2011|16:30:49|113019|||||Group = 188.0.0.69, Username = 188.0.0.69, IP = 188.0.0.69,
Session disconnected. Session Type: LAN-to-LAN, Duration: 0h:00m:00s, Bytes xmt: 0, Bytes rcv: 0,
Reason: User Requested
5|Aug 11 2011|16:30:48|713041|||||IP = 188.0.0.69, IKE Initiator: New Phase 1, Intf Inside, IKE Peer
188.0.0.69 local Proxy Address 20.0.0.106, remote Proxy Address 20.1.0.106, Crypto map (Outside_map)
6|Aug 11 2011|16:30:48|302015|99.0.0.100|500|188.0.0.69|500|Built outbound UDP connection 989639 for
Outside:188.0.0.69/500 (188.0.0.69/500) to identity:99.0.0.100/500 (99.0.0.100/500)
6|Aug 11 2011|16:30:49|713172|||||Group = 188.0.0.69, IP = 188.0.0.69, Automatic NAT Detection Status:
Remote end is NOT behind a NAT device This end is NOT behind a NAT device
6|Aug 11 2011|16:30:49|113009|||||AAA retrieved default group policy (Remote_Site_Policy) for user = 188.0.0.69
5|Aug 11 2011|16:30:49|713119|||||Group = 188.0.0.69, IP = 188.0.0.69, PHASE 1 COMPLETED
5|Aug 11 2011|16:30:49|713068|||||Group = 188.0.0.69, IP = 188.0.0.69, Received non-routine Notify
message: Invalid ID info (18)
5|Aug 11 2011|16:30:49|713050|||||Group = 188.0.0.69, IP = 188.0.0.69, Connection terminated for peer
188.0.0.69. Reason: Peer Terminate Remote Proxy 0.0.0.0, Local Proxy 0.0.0.0
3|Aug 11 2011|16:30:49|713902|||||Group = 188.0.0.69, IP = 188.0.0.69, Removing peer from correlator
table failed, no match!
5|Aug 11 2011|16:30:49|713259|||||Group = 188.0.0.69, IP = 188.0.0.69, Session is being torn down.
Reason: User Requested
4|Aug 11 2011|16:30:49|113019|||||Group = 188.0.0.69, Username = 188.0.0.69, IP = 188.0.0.69,
Session disconnected. Session Type: LAN-to-LAN, Duration: 0h:00m:00s, Bytes xmt: 0, Bytes rcv: 0,
Reason: User Requested
What am I doing wrong?
Thank you for your assistance in this matter.
Thank you for your reply Loren. Unfortunately I don't currently have access to the remote side's crypto configuration, since they are an external entity. However, I can check in and see if I can get that info.
Hopefully this is the information that you requested:
access-list Outside_27_cryptomap extended permit tcp object 20.0.0.106 object Remote_Server object-group RemoteSite
Result of the command: "sh access-list Outside_27_cryptomap"
access-list Outside_27_cryptomap; 1 elements; name hash: 0x3a48e673
access-list Outside_27_cryptomap line 1 extended permit tcp object 20.0.0.106 object Remote_Server object-group RemoteSite (hitcnt=36) 0xce74f220
access-list Outside_27_cryptomap line 1 extended permit tcp host 20.0.0.106 host 188.1.1.69 eq 204 (hitcnt=36) 0xdd218de0
Again, thank you for your help.
Similar Messages
-
Autofill in Google Toolbar does not appear to be working with Firefox 4 - It aways gives the message "Autofill not available for this page". This is happening on pages I have used Autofill on before upgrading to FF4 from Firefox 3.5.x
i did not see a solution posted - I tired what I read. Going back to an old version may solve the problem but it is a stupid solution so I have yet to do that.
I am on version 4 and autofil this does not work :
Popular answer Go to this answer
Uninstall version 5, then Google "google toolbar version 4", follow the link to FileHippo.com, and download and install the last version 4. When you reinstall it, make sure you turn off the option to perform automatic updates.
6 of 7 people found this answer helpful. Did you? Sign in to vote. Report abuse -
HT4053 How do I delete photos, the delete button does not appear to be working?
I have downloaded all my photos to my new IPad. I need to delete some I do not want, how do I do it. The delete button does not appear to be working?
I personally don't know of any other software that does syncing, however, you can use another cloud service like Dropbox or Flikr to house your photos, add and delete them and have them available for viewing on any device or comuter that has an internet connection.
I'm not sure why you would be having trouble not getting photos that you put into your Photo Stream Uploads folder on your iPad. Photo Stream is Photo Stream. Also, just so you know, photo management and Photo Stream have nothing to do with iTunes. Photo management on the computer is done through your photos folder and app (on a Mac, it's iPhoto). You only use iTunes to tell the sync process which items to retrieve and sync from that library. Photo Stream is completely independent of iTunes altogether.
If you want to get photos from a camera to your iPad without having to use a computer, get a camera connection kit which will allow you to physically hook the camera to the iPad, and to directly download the photos from the camera to the iPad.
You would still want to also hook the camera up to the computer to back those photos up to your photo library on your computer.
Also you might want to look into purchasing (for under $5) iPhoto for your iPad:
https://itunes.apple.com/us/app/iphoto/id497786065?mt=8
Seems like you might benefit from talking to your local Apple Store about when they might have some sessions for learning photo management and sharing between your device and computer, because what you appear to be wanting to do is all do-able. I guess I'm just missing what your issue is. You can many things with photos on your iPad, however, your device will never be a substitue for your computer for backing up and managing your photos.
So, best of luck, I hope one of the suggestions above will help you to achieve what you are trying to do.
Cheers,
GB -
Video will not play on BBC site error message this content does not appear to be working .Help
I have bbc news as home page after i updated to firefox 10 if i try to play embedded video i get the eror message [this content does not appear to be working] Help
Please read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, or by corruption of certain system caches.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. Note: If FileVault is enabled on some models, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to boot and run than normal, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal boot may also be somewhat slow.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin. Test while in safe mode. Same problem? After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of the test. -
My iMessage does not appear to be working. Every time I go to reply to an existing message it just appears as normal text. I have tried to create a new message but it still just defaults to normal messages. I have checked my settings but it is all set up as it should be. Is there anything I've missed or could try? Thanks
Try the following:
In Finder, select the problematic volume and then press command-I.
Expand the Sharing & permissions section if it's collapsed.
If the section is locked, then unlock it by pressing the padlock button and then authenticating as directed.
Tick/check Ignore ownership on this volume. -
I messages does not appear to be working on iPad every time I type a message it comes up as in delivered but I can type the same message on my iPhone and it works straight away
MMS is a carrier issue... contact Verizon and ensure your account is provisioned correctly. I would think that someone would be intelligent enough to do that before buying a new device, but......
iMessage could be an activation issue or a network issue.
Have you tried Settings > General > Reset > Reset Network Settings?
Does iMessage work consistently on Wi-Fi? -
My disc drive on my imac does not appear to be working. It takes the disc in but then spits it out without reading it. I have thought about purchasing an external disc drive, can someone advise me please?
Try the following:
In Finder, select the problematic volume and then press command-I.
Expand the Sharing & permissions section if it's collapsed.
If the section is locked, then unlock it by pressing the padlock button and then authenticating as directed.
Tick/check Ignore ownership on this volume. -
my on/off button does not appear to be working on my iphone 3.....is there any way around this....anyway around this?...the phone also periodically just switches off.
Likely a hardware issue... no way around that except to get it repaired or don't use it (the button).
Try restoring to solve the switching off problem. -
Click wheel does not appear to be working
My click wheel does not appear to be working. I can however, press "menu" & the center button at the same time to reset it. Any suggestions on how to get it working again?
Have you tried doing a RESTORE on the iPod when plugged in and showing up in iTunes?
Patrick -
My microphone does not appear to be working, people can not hear me on Skype.
My microphone does not appear to be working, people can not hear me on Skype. TIA
I have the same problem..-_-
-
I have a student trying to set up an App Store account (she has an Apple ID), however she is being asked for credit card information. The option of NONE does not appear as one of the choices with the other credit cards.
Any assistance?There are instrctions on this page for how to create a new account (it won't work with existing account) without giving a credit card number : http://support.apple.com/kb/HT2534 e.g. select a free app in the store and click on 'create Apple id' when 'buying' it.
-
I go to '''www.thegarden.com''' I click on the tab '''View Full Calendar'''. It does not open. It works on AOL but not Firefox. And for some reason it also does not work when I use Internet Explorer. The majority of times when I click on that tab (in Firefox) it does not work. On a rare occasion it will open. I am not doing anything differently either time.
Any help would be greatly appreciated.Clear the cache and the cookies from sites that cause problems.
"Clear the Cache":
* Tools > Options > Advanced > Network > Offline Storage (Cache): "Clear Now"
"Remove Cookies" from sites causing problems:
* Tools > Options > Privacy > Cookies: "Show Cookies"
Start Firefox in <u>[[Safe Mode]]</u> to check if one of the extensions is causing the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > Appearance/Themes).
*Don't make any changes on the Safe mode start window.
*https://support.mozilla.com/kb/Safe+Mode
*https://support.mozilla.com/kb/Troubleshooting+extensions+and+themes -
The link to portal patches(in Metalink) does not appear to be working
The link at http://portalstudio.oracle.com/servlet/page?_pageid=1787&_dad=ops&_schema=OPSTUDIO
does not seem to be working. When clicking on the links, I get that I am not allowed access even though my licenses say I am.
Also, if I enter Metalink and enter that bug number, it is not found.
What's up with that?Don't know since when. But the last weekend I applied a bunch of SharePoint Updates and the problem seems solved now. Unfortunately I can't say exactly which update it was.
The similar problem which we had with the blog mail alerts when clicking on the "view" link, could be solve by
this workaround. -
Time machine volume does not appear but backup works..
Hi. I have a Sno Leo server used for Time Machine backups. When I try to add a bew user to the backup, the backup volume does not appear (Time Machine Prefs > Select disk). The backup clients that have been previously set up work as normal.
In the Finder, press the key combination shift-command-C, or select
Go ▹ Computer
from the menu bar. A window will open showing all mounted volumes. Select the one in question and open the Info window. What is shown as the Format in the General section? If it's not "Mac OS Extended," Time Machine can't back up the volume. -
Settings iCloud Photos does not appear on my iPhone with iOS8
I have created some shared iCloud photo streams using iPhoto. I used to be able to access the stream and update it using my iPhone 4S on iOS 7. Since upgrading to iOS 8, the streams no longer appear.
When I go to Settings > iCloud (as instructed by Apple's trouble shooting guide), the Photos option does not appear as it used to in iOS 7.
I've tried to logout of iCloud and re-login and this has not resolved the issue. Any help would be appreciated!It is likely on another page, in a folder, or you have restrictions set. Check all of these.
If you do not find it, then reset the homescreen layout ( covered in the manual).
Maybe you are looking for
-
I have a project that crashed on me when I was about to finish it. When I try to reopen Final Cut Pro it wouldn't open until I took the project out of the Final Cut Project folder. Can somebody tell me if this is a problem that has a solution? I cann
-
can i get some help how to resolve this issue
-
HFM 11.1.2.2. upgrade utiltilty
Can anyone tell me if I can copy that to an existing 11.1.2.1 environment? Or will I need some of the .dlls and such to copy over to run this to upgrade the app before migrating to the new server?
-
Just in general which one do you think is the better value and which would you prefer. The price diference as you know is around $500 plus tax. Do you think what you get with the upgraded version is worth the price (2Ghz, 1gig Ram, and 100GB Hard Dri
-
OS4 x Viseeo for Mercedes Benz
I am very surprised I can't undo my iPhone's software update. The whole thing began when I updated my iPhone's software to OS4. The problem is, before that I didn't have any problem with the handset and now two big issues: My iPhone no longer synchro