Solved

ASA:  Group Translation

Posted on 2007-04-04
3
1,400 Views
Last Modified: 2008-01-09
Hello Experts,

Before proceeding with my questions, I would like to emphasize that I am new to the Cisco ASA 5510.  I amtrying to determine as to why a user cannot connect to our VoIP and determined (by looking at the Real Time Logger) that the user is not getting a translation.  Below is the a piece of the log:

No translation group found for udp src outside:192.168.90.22/1146 dst inside:192.168.66.20/69

Their is a tunnel (Lan-To-Lan) setup between site A and site B.  The user can get to other files located in site B.  My question is, where in the ASDM can I find and probably add this subnet so that it can get translated.  If someone can guide me as to where to look, I certainly appreciate it.

As always, thank you in advance for your time on this matter.
0
Comment
Question by:coperator
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 10

Accepted Solution

by:
Sorenson earned 500 total points
ID: 18857179
It looks like the error could be because the nat is not being exempted for the vpn tunnel.  Is this vpn tunnel up and working properly, or are you seeing other errors besides this one.

In the ADSM click on configuration, then click on NAT and look at the Exempt Items under the inside interface, there should be an exemption for the lan to lan traffic (looks like source 192.168.66.0 /24destination 192.168.90.0 /24 )
0
 
LVL 1

Author Comment

by:coperator
ID: 18860128
Sorenson,

The VPN tunnel is currently running and working, except the user is trying to use a Cisco softphone and this is were it fails.  Now their is no entry like source 192.168.66.0 /24destination 192.168.90.0 /24 in the inside interface.  I went ahead made that entry.  Is that what you are suggesting?

Again, thank you!
0
 
LVL 10

Expert Comment

by:Sorenson
ID: 18917383
What subnet does the cisco softphone need to connect to?  Typically it will need to be able to see the Callmanagers, and any gateways that are used for call placements.  Are their IP addresses included in the VPN SA configuration?  Are they also included in the exempt items under the ADSM?
0

Featured Post

Retailers - Is your network secure?

With the prevalence of social media & networking tools, for retailers, reputation is critical. Have you considered the impact your network security could have in your customer's experience? Learn more in our Retail Security Resource Kit Today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
Examines three attack vectors, specifically, the different types of malware used in malicious attacks, web application attacks, and finally, network based attacks.  Concludes by examining the means of securing and protecting critical systems and inf…
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

724 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question