Friday, January 15, 2021

[Packet Tracer] ASA 5506 NAT won't translate

Whenever I send ICMP packet from a device with an IP address of 192.168.5.2 through The ASA 5506. It won't translate the packet's address to the outside interface's address. But, if I send a ICMP packet from the router itself. It will therefore translate it into intended address. Why doesn't it translate the packet from the other device?

Worth mentioning:

I also connected a PC directly to the ASA. Which it sends a ARP message at first to the ASA, and once it is done. It then sends the ICMP packet, and translates successfully.Does the ARP message to the ASA somehow updates its table, and makes it possible to translate?

Please take a look at the imgur images to get an understanding how the network looks like:

https://imgur.com/a/NHt43nN

Help would have been appreciated!

ASA Configuration:

ASA Version 9.6(1) ! hostname ASA names ! interface GigabitEthernet1/1 nameif inside security-level 100 ip address 10.0.0.1 255.255.255.252 ! interface GigabitEthernet1/2 nameif outside security-level 0 ip address 209.165.200.226 255.255.255.252 ! interface GigabitEthernet1/3 nameif DMZ security-level 50 ip address 172.16.1.120 255.255.255.252 ! object network intranet subnet 192.168.1.0 255.255.255.0 ! route outside 0.0.0.0 0.0.0.0 209.165.200.225 1 ! object network intranet nat (inside,outside) dynamic interface ! telnet timeout 5 ssh timeout 5 ! 



No comments:

Post a Comment