Log message 106011 Deny inbound (No xlate) chars

[jmandiaz]

Hey Guys,

I was wondering if any of you had ran into this problem before? My firewal is loggin 106011 according to cisco message log i have to provide access from an interface with a higher security to a lower security, using the nat and global commands.

I've checked my config and everything seems ok.

Any sugestions would be greatly appriciated.

Thanks


JM

 

[8dstaicu]

Usually you’ll get this message when a packet has as destination address a PAT address cre-ated with global command. In this case you can ignore it. I get this message when the mail server that it’s in DMZ send an ident packet to a machine that access it through the PAT address. The explana-tion that came from Cisco it’s strange and unclear. I think they should give a detailed explanation.