ASA 5510 - traffic from LAN to LAN (via public IP) is denied

infocis13 — Tue, 12 Mar 2019 03:52:56 GMT

Hello,

On my network, I have an ASA 5510 with this configuration :

WWW

ISP Bridge

(outside Interface : 129.*.*.*)

ASA 5510

(inside interface : 192.168.1.1)

Local Network

(192.168.1.5 to 192.168.1.200)

There is a rule to redirect access from the outside on port 80 to a specific host in my LAN.

When I try to access this specific host with the public IP (for instance : http://129.*.*.* ) from the outside : no problem.

But when I try to access from the inside network the same host with the public IP (for instance : http://129.*.*.* ) : the ASA recognize that this is the IP of his "outside interface", redirect this traffic to the LAN but deny the connection...

Erro Level 3 :

192.168.1.122

50708

129.*.*.*

TCP access denied by ACL from 192.168.1.122/50708 to Inside:129.*.*.*/80

Is there any solution to solve this problem?

Thank you.

ASA 5510 - traffic from LAN to LAN (via public IP) is denied

mvsheik123 — Mon, 03 Mar 2014 22:12:31 GMT

Hi,

You need to configure DNS doctoring. Check the below link..

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/115753-dns-doctoring-asa-config.html

hth

topic ASA 5510 - traffic from LAN to LAN (via public IP) is denied in Network Security

ASA 5510 - traffic from LAN to LAN (via public IP) is denied

ASA 5510 - traffic from LAN to LAN (via public IP) is denied