Question about configuration of NAT on ASA

Hi all,
I have ASA config with DHCP and its providing IP to users.
ASA is connected to 3550 switch it has direct connection or say default static route
From 3550 switch  connection goes to Router and it does the NAT   and has connection to outside world.
My question is do i need to configure the NAT inside  and global (outside ) on the ASA  or not?
As per my understanding NAT is done by router which has connection to ISP.
Thanks
Mahesh

Hi Jennifer,
Thanks for replied.
I tested like this  config the NAT on ASA 
then as per your reply run the command no nat-control as ASA ver is 8.4
But nat config is still there in ASA.
I did sh xlate it shows
ciscoasa# sh xlate
27 in use, 371 most used
PAT Global 192.168.11.2(33396) Local 192.168.1.5(57177)
PAT Global 192.168.11.2(61657) Local 192.168.1.5(57176)
PAT Global 192.168.11.2(52259) Local 192.168.1.5(57175)
PAT Global 192.168.11.2(30453) Local 192.168.1.5(57174)
I did clear xlate still there is output from the sh xlate
My question is how we test that ASA is nating or not ?
Which commands can tell us that ASA is doing NAT ?
Thanks
MAhesh

Similar Messages

  • Some questions about configuration in MAX.

    Hello,everyone!
    I have some questions about configuration in MAX(I am a jackaroo for motion control development),I hope I can get your help.
    I use PCI-7344+UMI-7764+Servo amplifier+Servo motor,my MAX version is 4.2 and I use NI-Motion7.5
    My question as following:
    1,In Axis Configuration,for motor type,why I must select stepper but not servo?my motor is servo motor!If I select Servo,my motor can't run,I don't know why.
     If I select stepper,though motor can work but I can't test encoder in MAX.
    2,In Stepper settings,for stepper loop mode,why I must select open-loop but not close-loop?If I select close-loop,the servo motor doesn't work too.
    3,If I want my two servo motors run at different velocity,How shoud I do?It seems I just can set the same velocity in MAX for my two servo motors.
     My English is poor,Pls pardon me!I come from China.
    Thank you for your help!
    EnquanLi
    Striving is without limit!

    Hi,Jochen,
    Thank you for your kindly help!
    The manufacturer of the drive and motor that I am using now is Japan SANYO DENKI,drive type is RS1A01AA,motor type is R2AA06020FXP00.
    And I use position control mode,thehe encoder's counts per revolution is 131072.I set the electronic gear ratio to 1:1 for drive.
    Now,I can use Close-Loop to control the motor but still has some problems.When I configure it to run in closed loop mode, the motors behave strangely and never move to the target position.When I configure it to run in closed loop mode, the motors behave strangely and never move to the target position.The detail situation is as following
    1,Motor can't run.
    2, Or motor moves to a position, then moves in the same direction agian and eventually stops.
    Except for the  two points mentioned above,"Following Error" is  occured frequently,I don't know why.
    I am still not clear why I must set the motor type be stepper in MAX .
    And I have another question:what the relationship between the steps and the counts?They have the proportion relations?I notice that there are a section said like this in help document: For proper closed-loop and p-command operation, steps per revolution/counts per revolution must be in the range of 1/32,767 < steps/counts < 32,767. An incorrect counts to steps ratio can result in failure to reach the target position and erroneous closed-loop stepper operation.
    I am verry sorry I have too many questions!
    I am very appreciate for your kingly help!Thanks again!
    EnquanLi
    China
    Striving is without limit!

  • I have a question about Configuration of Post with Clearing

    I have a question about confiruation of the post with clearing which is t-doce 'FB05'.
    When I make post with clearing on 'FB05', I can change the additional selections.
    Where can I control the confiruation of the additional selections in t-code 'FB05'
    Please, tell me the menu path.

    Hi,
    In SPRO, go to
    Financial Accounting (New) > Accounts Receivable and Accounts Payable > Business Transactions > Incoming Payments > Manual Incoming Payments > Make Settings for Processing Open Items > Choose Selection Fields
    Hope this helps.
    Thanks

  • Question about configurations in Old Server

    Dear All,,
    I have a Question !
    How will you find what are the configuration are in a server.. for example..
    Is the DB configured RAC or DATA guard ?
    Is RMAN configured or not ?
    because at any time we have to face this request for Client who they don't have details regarding their Server,, (in Old Support Projects).
    if i have a plan for a upgradation of database what are the documents i have to prepare and what are the steps i have to take at initial stage !
    Regards
    HAMEED

    Hameed,
    This should be documented and those documents should be provided by the clients.
    You could do some investigation but again this will not be correct or complete without the documentation. For example, for RAC you could query the dynamic views (gv$instance, v$instance on each node) but this assume you already know what servers are configured. Or, you could refer to the RAC/DataGuard/RMAN configuration MOS docs for Oracle E-Business Suite and go through the steps to verify if those configurations are presented or not.
    Thanks,
    Hussein

  • Question about configuring REST web service in EBS instance

    I am from EBS SCM team. From one wiki page, it says OA Framework provides REST framework to expose OAF BC4J objects as web services. Can you provide more details about how to configure REST web service for one EBS instance? Any related information is also helpful.
    Edited by: 936859 on Sep 7, 2012 5:45 PM

    IIRC you must activate PAPI-WS for the engine. In Studio you do it by right-clicking on the project, then "engine preferences". In enterprise/standalone you must activate PAPI-WS in the Admin Center.

  • The question about configuration Organization Unit on spro

    Dear all.
    I want to configuration Organization Unit on spro so I have created O.Units, Jobs and positions on Personnel Administration->Organizational Assignment->Organizational Plan  but I can't see these values about O.Unit, job and position on  SAP Access Easy .
    How to see these values on  SAP Access Easy ?
    Can I input these values about O.Units, Jobs and positions on spro ?
    Thanks so much.
    Huyen Nguyen

    instead of that
    Define the Number ranges
    in OOCR
    for all the objects
    Make a Template for Objects and Object Id
    and upload the same thru PP01
    than all the enties will sit in the SPRO
    >note it is not mandatory to create thru SRPO wht in case if u have 4000 to 5000  Employees
    So the best way is upload the Data thru LSMW thru Proper objects and Relatioships

  • Questions about configuring sshd

    I checked the server admin manual and didn't find much detail on this topic. I took a look at the man page for sshd, but didn't really understand everything I read. Hoping someone here can help me understand how to configure sshd in OSX. I'm pretty new to OSX, but I have some experience working with Linux hosts. Working with sshd seems a little different on OSX.
    I need to adjust the system wide setting to timeout inactive SSH sessions. Currently a stale session will hang open for ever. I need to set the timeout to 15 minutes. Where/How is this done? Is this done in /etc/ssh_config by setting a value for "ConnectTimeout?" Is this seconds or minutes?
    How do you restart sshd after making changes to the config?
    What is the difference between /etc/ssh_config and /etc/sshd_config?

    First off, there are two config files of interest here:
    /etc/ssh_config - configuration file for the ssh client
    /etc/sshd_config - configuration file for the ssh server
    If you make a change to sshd_config then the change will apply to all connections made to this server. Making changes to ssh_config affect outgoing connections initiated by this machine.
    So the first question is which file to edit.
    If you want to control this at the server side (so idle connections are terminated by the server) then edit /etc/sshd_config.
    All the options are covered in the sshd_config man page:
    # man sshd_config
    Specifically, I think you're looking for a combination of ClientAliveInterval and ClientAliveCountMax.
    ClientAliveInterval sets how frequently SSHD checks the client connection. If ClientAliveCountMax tests are performed without any response the connection is closed.
    So, for your 15 minute disconnect you could set the ClientAliveInterval to 300 (5 minutes = 300 seconds), with a ClientAliveCountMax set to 3 (you don't want to set it to 15 minutes/1 Max since any temporary network delay could cause the connection to drop).
    To control this from the client side, the corresponding parameters to add to /etc/ssh_config are ServerAliveInterval and ServerAliveCountMax.
    How do you restart sshd after making changes to the config?
    Changes are dynamic, and applied to each new connection (i.e. the next time you log in it will use the current sshconfig/sshdconfig settings).

  • Question about configuring Etherchannel on Catlyst 3750

    Hi, I have a stack witch catalyst 3750, I mean I have 3 switches ( 1 master, 2 slaves)
    My question
    Can I configure an etherchannel having 2 interfaces on each switch?
    How can I do this?
    Thanks
    Regards

    If you have a stack it should present itself as a single switch just put channel-group 1 desirable nonsilent if you are going to another cisco on each of the interfaces you want in the channel . this is for a layer 2 etherchannel . For a layer 3 etherchannel is somewhat more involved and too long to write here , just go to the cisco.com site and search on configuring etherchannels,3750 .

  • Question about configuration (ATI 5770) w/ 3 monitors

    Ok I already know how to get three monitors running on the ATI 5770.  I have one native mini DisplayPort, one mini DisplyPort to VGA and one native  DVI or DVI to HDMI.  What I need to know (before I buy another native mini DisplayPort monitor) is if the 5770 can run two native mini displayPort monitors and a native DVI?  Has anyone done this?

    i am currently running 3 displays on my macpro 1,1 with a 5770 card. here is my setup
    mini display port to dvi (dual link active from monoprice) to an Acer 24" monitor
    mini display port to dvi (sme as about) to and dvi to hdmi adapter to 65" 1080i television
    dvi port to Acer 24" monitor.
    i have to set it up this way because if i set both monitors to mini display port adapters and the tv to the dvi to hdmi adapter one of the monitors will not come on. setting it this way all three monitors are working. the only problem that i have is that my tv monitor flickers like the computer is refinding it all the time. i haven't really had a chance to look into it too much, but i can tell you that without the active link adapters only two of the three connections will work at one time.
    hope this helps

  • Questions about configuring passwords ...

    RAS-ROUTER:(config)#enable secret ?
    0
    5
    LINE
    whats the difference between using the number '0' and then typing the password from just typing the acctual password?
    Thanks

    hi
    AFAIK u can enter the unecrypted string as the password after keying in 0 which we does normally when configuring the password.
    which it does enrypt using md5 algorithm and displays in the running config.
    Router(config)# enable secret cisco
    Router# show running-config
    version 12.1
    no service single-slot-reload-enable
    service timestamps debug uptime
    service timestamps log uptime
    no service password-encryption
    hostname CE
    logging rate-limit console 10 except errors
    no logging console
    enable secret 0 $1$53Ew$Dp8.E4JGpg7rKxQa49BF9/
    when u use keyword 5 in conjuntion with the command then u need to enter the encrypted keystring followed by 5.
    regds

  • [SOLVED] Question about configuring i3

    I would like to use the "Tab" key instead of the "Shift" key in a default i3 configuration with the "Alt" key as modifier. I replaced "Shift" for "Tab" in ~/.i3/config, but it doesn't work as I expected. For example, by default $mod+Shift+1 moves the focused container to workspace 1. This doesn't work when changed to $mod+Tab+1, but works if set to $mod+Tab. The userguide (http://i3wm.org/docs/userguide.html#keybindings) states the available modifiers: Mod1 to 5, Shift and Control. It seems that Mod1 is "Alt", Mod4 is "Windows", but I don't know the others. Perhaps the reason is that the "Tab" key is not set as a modifier? Would you please assist me with this and thank you in advance.
    Last edited by rayanamukami (2014-05-30 17:52:18)

    rayanamukami wrote:Perhaps the reason is that the "Tab" key is not set as a modifier?
    That's right. Modifier keys modify input, while the Tab key sends input; If you hold down the Tab key, it will repeatedly send tabs to stdin. You can use xmodmap or setxkbmap to change around the mappings of keys. A common one which I use is setting Ctrl to the CapsLk key since, come on, how often does anyone use CapsLk?

  • SOLVED: Question about configuration guide

    I found configuration guide in:
    http://www.oracle.com/technology/products/forms/pdf/B10170_01.pdf
    Is there a more recent/up to date version?
    Thanks,
    USA
    Message was edited by:
    USA

    Is there a more recent/up to date version?Sure, http://download.oracle.com/docs/cd/B19375_07/doc/frs/forms/B14032_03/toc.htm

  • Question about configuring Computer Browser service

    On network computers after the net view command displayed different lists of computers.
    All computers are in the same domain. OS: Windows Server 2012, 2012R2, Windows 8, 8.1. On all computers except domain controllers and another server using Group Policy disabled Computer Browser service. I can not understand why the
    net view command provides different lists of computers.
    I can provide more detailed information.

    Hi,
    The NetBIOS will be discard in the future it recommend you use DNS name resolution, in your case if the NetBIOS based name resolution is necessary it recommend you create
    a WIN server.
    In a Windows NT domain structure, the primary domain controller (PDC) is always selected as the domain master browser. Only the PDC can be a domain master browser. If a PDC
    is not present, a domain master browser is not available and you are unable to obtain browse lists from workgroups other than the workgroup you are located in.
    With the multi subnet you must configure your router to allow the WINS related protocol through the different subnet.
    The related third party information:
    How to Enable Browsing Using NetBIOS Over IP
    http://www.cisco.com/c/en/us/support/docs/additional-legacy-protocols/ms-windows-networking/17057-Netbios.html
    The related KB:
    Description of the Microsoft Computer Browser Service
    http://support.microsoft.com/kb/188001/en-us
    You cannot view other workgroup computers on the network on a Windows XP-based computer
    http://support.microsoft.com/kb/903267/en-us
    NetBIOS over TCP/IP Name Resolution and WINS
    http://support.microsoft.com/kb/119493/en-us
    The similar thread:
    member of both Workgroup and Domain?
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/2ead7337-e0ee-49ed-a5a7-724157c22c74/member-of-both-workgroup-and-domain?forum=winserverNIS
    Hope this helps.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Question about configurable material

    Hi :
    Can somebody tell me what's required step to set up a configurable material? What are dependencies,profiles?And how do they work?

    Create configurable material mmk1/in mm01 use material type KMAT, characteristics CT04, classes Cl02, configuration profile Cu41, define the class in material master in classification view, assign objects to class Cl24N
    Create BOM Work center, Routing and proceed.
    If you have any doubt refer
    http://help.sap.com/erp2005_ehp_03/helpdata/EN/92/58c09b417011d189ec0000e81ddfac/frameset.htm

  • Question about configuring Global IPv6 address on interface

    It seems when configuring a global IPv6 address on a layer 3 interface, we cannot specify the whole 128 bit address. We can only specify the prefix and leave the last 64 bits to be generated by the router:
    http://www.cisco.com/en/US/docs/ios-xml/ios/ipv6/configuration/12-2sx/ip6-addrg-bsc-con.html#GUID-70188E8F-16D2-4DD1-8DE2-70073FF37CC8
    Then how can I specify the router address to the client using DHCPv6? Do I have to keep the router RAs while using DHCPv6 together?
    Thanks.
    zhenning

    Hi Leo,
    Where is it stated in this doc that you can't configure a /128 ?
    Router(config-if)#ipv add 2001::1/128
    Router(config-if)#do sh ipv int lo0
    Loopback0 is up, line protocol is up
      IPv6 is enabled, link-local address is FE80::9CD7:2EFF:FEF0:99FA
      Global unicast address(es):
        2001::1, subnet is 2001::1/128
      Joined group address(es):
        FF02::1
        FF02::2
        FF02::1:FF00:1
        FF02::1:FFF0:99FA
      MTU is 1514 bytes
      ICMP error messages limited to one every 100 milliseconds
      ICMP redirects are enabled
      ND DAD is not supported
      ND reachable time is 30000 milliseconds
    The IOS accepts it on any interface but it will only work for Loopbacks.
    I configured a /126 between 2 serials and it worked without any problem but for prefix-advertisement through RA  to work then you must configure a /64.
    Regards.
    Alain

Maybe you are looking for