Solved

ASA:  Group Translation

Posted on 2007-04-04
3
1,396 Views
Last Modified: 2008-01-09
Hello Experts,

Before proceeding with my questions, I would like to emphasize that I am new to the Cisco ASA 5510.  I amtrying to determine as to why a user cannot connect to our VoIP and determined (by looking at the Real Time Logger) that the user is not getting a translation.  Below is the a piece of the log:

No translation group found for udp src outside:192.168.90.22/1146 dst inside:192.168.66.20/69

Their is a tunnel (Lan-To-Lan) setup between site A and site B.  The user can get to other files located in site B.  My question is, where in the ASDM can I find and probably add this subnet so that it can get translated.  If someone can guide me as to where to look, I certainly appreciate it.

As always, thank you in advance for your time on this matter.
0
Comment
Question by:coperator
  • 2
3 Comments
 
LVL 10

Accepted Solution

by:
Sorenson earned 500 total points
ID: 18857179
It looks like the error could be because the nat is not being exempted for the vpn tunnel.  Is this vpn tunnel up and working properly, or are you seeing other errors besides this one.

In the ADSM click on configuration, then click on NAT and look at the Exempt Items under the inside interface, there should be an exemption for the lan to lan traffic (looks like source 192.168.66.0 /24destination 192.168.90.0 /24 )
0
 
LVL 1

Author Comment

by:coperator
ID: 18860128
Sorenson,

The VPN tunnel is currently running and working, except the user is trying to use a Cisco softphone and this is were it fails.  Now their is no entry like source 192.168.66.0 /24destination 192.168.90.0 /24 in the inside interface.  I went ahead made that entry.  Is that what you are suggesting?

Again, thank you!
0
 
LVL 10

Expert Comment

by:Sorenson
ID: 18917383
What subnet does the cisco softphone need to connect to?  Typically it will need to be able to see the Callmanagers, and any gateways that are used for call placements.  Are their IP addresses included in the VPN SA configuration?  Are they also included in the exempt items under the ADSM?
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Read about achieving the basic levels of HRIS security in the workplace.
This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question