ASA and multiple static problem

solefald — Mon, 11 Mar 2019 09:20:38 GMT

Hello,

I have spent an entire day trying to figure this out, but have to ask for help.

Here is my setup

outside 10.10.6.243 (10.10.6.240/29)

newdmz 10.10.33.163 (10.10.33.160/27)

olddmz 10.10.9.65 (10.10.9.64/28)

provider has following set on their routers:

ip route 10.10.33.160/27 10.10.6.243

ip route 10.10.9.64/28 10.10.6.243

so far so good.

on the ASA i have following set

static (olddmz,outside) 10.10.9.64 10.10.9.64 netmask 255.255.255.240

static (newdmz,outside) 10.10.33.160 10.10.33.160 netmask 255.255.255.224

this is where the problems start.

10.10.9.64/28 subnet works great in both directions, but 10.10.33.160/27 can only get out (i have a server sitting behind the firewall)

My config (slightly modified) is attached.

thank you in advance

Re: ASA and multiple static problem

solefald — Wed, 17 Jan 2007 16:28:59 GMT

Gentlemen,

This issue has been resolved and I fee like a complete idiot 🙂

It was a missing ACL, which i was sure I put in there earlier in a day, but i guess i ended up pasting the old one back in.