cisco ASA端口转发问题

网络工程 思科 思科-ASA
2022-02-03 11:49:41

我配置了 Cisco ASA,并且 NAT 配置良好。但是现在,我必须在那里打开一些端口,它所显示的只是这个错误:

Address x.x.x.x overlaps with public ip and the nat is not downloaded

可能是什么问题呢?

思科 ASA 版本 9.2(2)4 和 ASDM 版本 7.2(2)1在此处输入图像描述

interface GigabitEthernet0/0
 nameif Public-IP
 security-level 0
 ip address x.x.x.x 255.255.255.0 

interface GigabitEthernet0/5
 nameif Global-wireless
 security-level 70
 ip address 192.168.0.1 255.255.255.0 
!
interface Management0/0
 management-only
 nameif management
 security-level 100
 ip address 192.168.1.1 255.255.255.0 

same-security-traffic permit inter-interface
same-security-traffic permit intra-interface

object network global-wireless-subnet
 subnet 192.168.0.0 255.255.255.0

object network obj-192.168.0.205
host 192.168.0.205
nat (global-wireless,public-IP) static x.x.x.x service tcp 4370 4370

ERROR: Address x.x.x.x overlaps with Public-IP interface address.
ERROR: NAT Policy is not downloaded

注意:我今天读到,我应该使用地址而不是 IP,但我尚未对其进行测试。我明天做测试。

1个回答

如果您以这种方式使用静态对象 NAT,并将外部接口 IP 作为映射 IP - 您必须使用“接口”而不是使用特定接口 IP。

nat (global-wireless,public-IP) 静态接口服务 tcp 4370 4370