[c-nsp] FWSM INT 0 configure

zhangyongshun zhangyongshun1986 at gmail.com
Mon Nov 5 21:49:14 EST 2012


FWSM# show version

FWSM Firewall Version 4.0(4)
Device Manager Version 6.1(2)F

Compiled on Mon 09-Feb-09 00:51 by fwsmbld

FWSM up 21 days 17 hours

Hardware: WS-SVC-FWM-1, 1024 MB RAM, CPU Pentium III 1000 MHz
Flash STI Flash 8.0.0 @ 0xc321, 20MB

0: Int: Not licensed : irq 5
1: Int: Not licensed : irq 7
2: Int: Not licensed : irq 11
The Running Activation Key is not set, using default settings:

This is my FWSM NAT configure.
global (outside) 1 interface
global (outside) 10 12.22.53.245
nat (inside) 1 10.11.4.240 255.255.255.240
nat (inside) 10 10.11.3.0 255.255.255.0
nat (inside) 0 115.212.0.0 255.255.248.0
nat (inside) 1 10.11.0.0 255.255.224.0
nat (inside) 10 10.11.32.0 255.255.224.0
nat (inside) 1 10.10.0.0 255.255.0.0
alias (inside) 10.11.4.243 12.22.53.243 255.255.255.255

but is found out that always a private ip address in "show xlate state
identity 's output".
like this:

Global 115.212.7.115 Local 115.212.7.115
Global 115.212.7.116 Local 115.212.7.116
Global 115.212.1.110 Local 115.212.1.110
Global 115.212.7.117 Local 115.212.7.117
Global 115.212.3.116 Local 115.212.3.116
Global 115.212.7.118 Local 115.212.7.118
Global 115.212.7.121 Local 115.212.7.121
Global 115.212.7.123 Local 115.212.7.123
Global 115.212.3.117 Local 115.212.3.117
Global 115.212.7.126 Local 115.212.7.126
Global 115.212.7.128 Local 115.212.7.128
*Global 10.11.1.21 Local 10.11.1.21*
Global 115.212.7.131 Local 115.212.7.131
Global 115.212.7.132 Local 115.212.7.132
Global 115.212.7.134 Local 115.212.7.134
Global 115.212.1.119 Local 115.212.1.119
Global 115.212.1.112 Local 115.212.1.112
Global 115.212.7.137 Local 115.212.7.137
Global 115.212.7.138 Local 115.212.7.138
Global 115.212.7.139 Local 115.212.7.139
Global 115.212.1.136 Local 115.212.1.136
Global 115.212.7.140 Local 115.212.7.140

10.11.1.21 this user isn't able to access outside through NAT.
Have anybody know such problem or any suggestion.


More information about the cisco-nsp mailing list