ASA classifying packets

haydenmace — Fri, 21 Feb 2020 08:25:11 GMT

Hi, running in multiple mode, and sharing both the inside and outside interface.

Each context has it's own ip address etc.

The ASA classifies the packet into a context by matching the destination address to one of the contexts.

Does this mean that if I had contextA and contextB, both sharing their interfaces, that traffic originating from both customers could not go to the same destination i.e. customer A want to go to inside address of 1.1.1.1 and customer b wants to go to inside address of 1.1.1.1, since the classify works on destination, it would not work....

Thanks

Re: ASA classifying packets

nkhawaja — Mon, 03 Oct 2005 00:59:54 GMT

so you have two context , contextA and contextB

they are sharing inside and outside

Ip address of ContextA outside = 10.1.1.1

IP address of ContextB outside = 10.1.1.2

IP address of contextA inside = 1.1.1.1

IP address of contextB outside = 1.1.1.2

You need to define the translation for an address of ContextA e.g. 1.1.1.5

this host will only be reachable via contextA. If you define the translation on both contexts it will confuse out the contexts and classisification will fail.

topic ASA classifying packets in Network Security

ASA classifying packets

Re: ASA classifying packets