1-1 NAT direction on the ASA

[HungryHouse]

Fine brilliant people of the ASA forum, if you would, please let me know if you have ever run into a situation such as this or have any insight into this issue:

I had configured a 1-1 NAT in the following manner:

name 172.16.3.3 Centos
static (outside, DMZ) Centos 1.1.1.1 netmask 255.255.255.255

With the above config, I could not allow Centos communication with the outside world. Firewall rules were correct and verified....then out of a whim, we tried reversing the NAT statement order as follows and now everything works as intended:

static (DMZ,outside) 1.1.1.1 Centos netmask 255.255.255.255

Any ideas? We're a bit baffled.
Code version: 8.2.4
Platform: ASA5505


Real trouble call:
Customer: "I have a huge problem. A friend has put a screensaver on my computer, but every time I move the mouse, it disappears!"

 

[ADB100]

That's the correct syntax:

static (real_interface,mapped_interface) mapped_ip real_ip netmask mask

Seems a bit odd I know but that's how it is in ASA 8.2 and earlier.

See here:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008046f31a.shtml

Andy