Static/Global with mixed IP and Interface command

[Supergrrover]

Has anybody else run across this -

I had a working ASA on 7.0(4) code with
static (inside,outside) tcp [externalip] [port] [internalip] [port] netmask 255.255.255.255
global (outside) 1 interface
+ an ACL to allow this.

I upgraded to 7.2(1) and all of a sudden the statics were not translating
sho nat inside was showing
match tcp inside host SERVER eq PORT outside any
static translation to EXTERNALIP/PORT
translate_hits = 0, untranslate_hits = 17

No hits on the ACL and nothing was showing up in the syslog. I beat my head against a wall for a few hours and I finally got it fixed by making the statics use the interface
static (inside,outside) tcp interface [port] [internalip] [port] netmask 255.255.255.255

Just curious if anybody else has seen it and hope to head someone else's problem off.

Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[Berek78]

ARRGHH!
Yes, I have the smae problem on 7.2.2
Thank you very much for posting your solution!
I have been beating my head with this for two days.

I have read the guides on CCO and they ALL refer to the IP address on the outside in this configuration, never the word ' interface ' and that is irritating.

Thanks again,
Rick

 

[BuckWeet]

are you using dhcp? if so, thats the way its always been done with PIX software.

 

[Supergrrover]

I believe that the PIX/ASA won't let you run mixed references by IP and interface commands.

BuckWeet - This was with a static IP block. Notice that it was an update that broke the running config.


Brent
Systems Engineer / Consultant
CCNP, CCSP