topic Unassociated the access-list in Network Security

ASA dropping all traffic

CSCO12047997 — Tue, 12 Mar 2019 05:28:45 GMT

ASA is dropping all traffic to the interfaces.

Routing is fine as traffic FROM the ASA reaches anywhere needed fine.

Via the packet capture it can be seen that the implicit deny rule is blocking traffic. I have added an any-any rule (as this is testing) yet still I can see via packet capture that the implicit deny is blocking traffic. I am not sure why this is happening. I have associated the access-lists to the correct interfaces yet all traffic is being dropped.

HiDid you change the NAT rule

APPIREDDY — Mon, 09 Feb 2015 17:59:45 GMT

Do not associate the access-list to inside interface at all and report back. Please do this report back the following

show route

show nat

show run nat

show xlate

show run access-list

show access-list

also it would help us if you share the running config.

Unassociated the access-list

CSCO12047997 — Mon, 09 Feb 2015 21:16:39 GMT

Unassociated the access-list - made no difference.

Here is the run:ASA Version 8

CSCO12047997 — Mon, 09 Feb 2015 21:17:39 GMT

Turns out the issue was a NAT created directly with an interface which drops all traffic.

OK. is it all working now?

APPIREDDY — Mon, 09 Feb 2015 21:27:15 GMT

OK. is it all working now?

Yea it seems to be working

CSCO12047997 — Mon, 09 Feb 2015 21:33:55 GMT

Yea it seems to be working now. Once I reconfigured that specific NAT

good. you don't mind can you

APPIREDDY — Mon, 09 Feb 2015 21:35:32 GMT

good. you don't mind can you let me know which one?

of course it was the

CSCO12047997 — Mon, 09 Feb 2015 21:39:51 GMT

of course it was the following:

static (outside,inside) interface VPN_Tunnel-NAT netmask 255.255.255.255

thanks for that. I'm glad it

APPIREDDY — Mon, 09 Feb 2015 21:50:04 GMT

thanks for that. I'm glad it's all sorted.