Solved

portmap translation creation failed - (dynamic translation to pool 191(No matching global))

Posted on 2010-09-03
5
1,319 Views
Last Modified: 2012-05-10
Hi Experts -

I am receiving a 'failed portmap translation' on the company ASA5510 when attempting to ping to a given IP on a customer site.  I can see this within the syslog viewer on the ASDM, when attempting to ping an IP on a remote partner site.  For the same IP, when running a packet trace on the ASDM, I see the following : dynamic translation to pool 191 (No matching global).  

The ping (traffic)is not supposed to go to the outside interface - it should traverse a dedicated link to a DMZ to another site who is acting as a 'pass-through' to the destination (remote partner)

The translated interface appears to be the correct one.

What do I need to change in order to allow the traffic to the partner site (ping)?  I can certainly provide more detail, if needed.

Thanks for your insight!
0
Comment
Question by:davis
  • 2
  • 2
5 Comments
 
LVL 4

Assisted Solution

by:ullas_unni
ullas_unni earned 250 total points
ID: 33603746
hi,

--looks like you have an issue with NAT
--possibly you might be having a nat (inside) 191.... without a global (dmz) 191... which might be why the error no matching global..
--a show run of your device will be much appreciated.
0
 
LVL 1

Author Comment

by:davis
ID: 33648400
I was able to find the answer to my problem - it was simply a static route which needed to be added!
0
 
LVL 4

Expert Comment

by:ullas_unni
ID: 33648597
cool!
0
 
LVL 1

Accepted Solution

by:
davis earned 0 total points
ID: 33688316
to clarify the fix, I simply added the two static routes underneath 'Routing-Static Routes' section of Device Setup in ADSM.  Appreciate the pointer!
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Cisco Pix/ASA hairpinning The term, hairpinning, comes from the fact that the traffic comes from one source into a router or similar device, makes a U-turn, and goes back the same way it came. Visualize this and you will see something that looks …
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question