OPERATIONAL DEFECT DATABASE
...
...
Internal interface (nlp_int_tap) xlate entries are not getting displayed under show xlate after enabling ssh.
Enabled ssh 'any' (v4,v6) on inside_wm and pushed it to the device. Checked the nat table entries under NAT Section0. The following entries were created. firepower# sh nat Manual NAT Policies Implicit (Section 0) 1 (nlp_int_tap) to (inside_wm) source static nlp_server__ssh_0.0.0.0_intf2 interface destination static 0_0.0.0.0_4 0_0.0.0.0_4 service tcp ssh ssh translate_hits = 9, untranslate_hits = 18 2 (nlp_int_tap) to (outside_wm) source static nlp_server__ssh_0.0.0.0_intf4 interface destination static 0_0.0.0.0_6 0_0.0.0.0_6 service tcp ssh ssh translate_hits = 0, untranslate_hits = 0 3 (nlp_int_tap) to (inside_wm) source static nlp_server__ssh_::_intf2 interface ipv6 destination static 0_::_5 0_::_5 service tcp ssh ssh translate_hits = 3, untranslate_hits = 13 4 (nlp_int_tap) to (outside_wm) source static nlp_server__ssh_::_intf4 interface ipv6 destination static 0_::_7 0_::_7 service tcp ssh ssh translate_hits = 0, untranslate_hits = 0 4. show xlates does not show the xlates for the internal interface nlp_int_tap. firepower# sh xlate 9 in use, 10 most used Flags: D - DNS, e - extended, I - identity, i - dynamic, r - portmap, s - static, T - twice, N - net-to-net firepower#
NA
Click on a version to see all relevant bugs
Cisco Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
