Solved

ASA:  Group Translation

Posted on 2007-04-04
3
1,392 Views
Last Modified: 2008-01-09
Hello Experts,

Before proceeding with my questions, I would like to emphasize that I am new to the Cisco ASA 5510.  I amtrying to determine as to why a user cannot connect to our VoIP and determined (by looking at the Real Time Logger) that the user is not getting a translation.  Below is the a piece of the log:

No translation group found for udp src outside:192.168.90.22/1146 dst inside:192.168.66.20/69

Their is a tunnel (Lan-To-Lan) setup between site A and site B.  The user can get to other files located in site B.  My question is, where in the ASDM can I find and probably add this subnet so that it can get translated.  If someone can guide me as to where to look, I certainly appreciate it.

As always, thank you in advance for your time on this matter.
0
Comment
Question by:coperator
  • 2
3 Comments
 
LVL 10

Accepted Solution

by:
Sorenson earned 500 total points
ID: 18857179
It looks like the error could be because the nat is not being exempted for the vpn tunnel.  Is this vpn tunnel up and working properly, or are you seeing other errors besides this one.

In the ADSM click on configuration, then click on NAT and look at the Exempt Items under the inside interface, there should be an exemption for the lan to lan traffic (looks like source 192.168.66.0 /24destination 192.168.90.0 /24 )
0
 
LVL 1

Author Comment

by:coperator
ID: 18860128
Sorenson,

The VPN tunnel is currently running and working, except the user is trying to use a Cisco softphone and this is were it fails.  Now their is no entry like source 192.168.66.0 /24destination 192.168.90.0 /24 in the inside interface.  I went ahead made that entry.  Is that what you are suggesting?

Again, thank you!
0
 
LVL 10

Expert Comment

by:Sorenson
ID: 18917383
What subnet does the cisco softphone need to connect to?  Typically it will need to be able to see the Callmanagers, and any gateways that are used for call placements.  Are their IP addresses included in the VPN SA configuration?  Are they also included in the exempt items under the ADSM?
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Join & Write a Comment

A few customers have recently asked my thoughts on Password Managers.  As Security is a big part of our industry I was initially very hesitant and sceptical about giving a program all of my secret passwords.  But as I was getting asked about them mo…
Read about achieving the basic levels of HRIS security in the workplace.
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now