topic Re: Routing question in ASA 5500! in Network Security https://community.cisco.com/t5/network-security/routing-question-in-asa-5500/m-p/405487#M428438 <HTML><HEAD></HEAD><BODY><P>you may give the command "same-security-traffic permit intra-interface" a go.</P><P></P><P>however, according to the command reference, it supports ipsec packets only: "Permits communication in and out of the same interface when traffic is IPSec protected."</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a00804527dc.html#wp1002608" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a00804527dc.html#wp1002608</A></P></BODY></HTML> Tue, 06 Dec 2005 13:27:23 GMT jackko 2005-12-06T13:27:23Z Routing question in ASA 5500! https://community.cisco.com/t5/network-security/routing-question-in-asa-5500/m-p/405486#M428437 <P>Hello!</P><P>I have a question about routing function in ASA 5500. scenario: The asa (inside int 192.168.1.1) acts default gateway for all inside nodes. We have also another network on the inside (192.168.2.0), can the asa route traffic to this net via only the inside interface (192.168.1.1) i know that the pix dose NOT support this routing scenario, will the asa do it?? </P><P>Regards /Jonny</P> Fri, 21 Feb 2020 08:34:26 GMT https://community.cisco.com/t5/network-security/routing-question-in-asa-5500/m-p/405486#M428437 cisco7889 2020-02-21T08:34:26Z Re: Routing question in ASA 5500! https://community.cisco.com/t5/network-security/routing-question-in-asa-5500/m-p/405487#M428438 <HTML><HEAD></HEAD><BODY><P>you may give the command "same-security-traffic permit intra-interface" a go.</P><P></P><P>however, according to the command reference, it supports ipsec packets only: "Permits communication in and out of the same interface when traffic is IPSec protected."</P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a00804527dc.html#wp1002608" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a00804527dc.html#wp1002608</A></P></BODY></HTML> Tue, 06 Dec 2005 13:27:23 GMT https://community.cisco.com/t5/network-security/routing-question-in-asa-5500/m-p/405487#M428438 jackko 2005-12-06T13:27:23Z Re: Routing question in ASA 5500! https://community.cisco.com/t5/network-security/routing-question-in-asa-5500/m-p/405488#M428439 <HTML><HEAD></HEAD><BODY><P>No that didn't work</P></BODY></HTML> Wed, 01 Feb 2006 22:41:00 GMT https://community.cisco.com/t5/network-security/routing-question-in-asa-5500/m-p/405488#M428439 watson.daniel 2006-02-01T22:41:00Z Re: Routing question in ASA 5500! https://community.cisco.com/t5/network-security/routing-question-in-asa-5500/m-p/405489#M428441 <HTML><HEAD></HEAD><BODY><P>Not sure if this will work for IP traffic !!! you can either create a seperate vlan on the PIX for this and route between interfaces or use some other layer 3 device to redirect the traffic... as Jacko said, this might work well for IPSEC traffic....</P><P></P><P>hope this helps...</P><P></P><P>Raj</P></BODY></HTML> Thu, 02 Feb 2006 16:23:27 GMT https://community.cisco.com/t5/network-security/routing-question-in-asa-5500/m-p/405489#M428441 sachinraja 2006-02-02T16:23:27Z Re: Routing question in ASA 5500! https://community.cisco.com/t5/network-security/routing-question-in-asa-5500/m-p/405490#M428442 <HTML><HEAD></HEAD><BODY><P>Jonny,</P><P></P><P>We have done this by using sub-interfaces, but assuming you have only the 192.168.1.x network connected to the ASA, you can add a static route to point 192.168 2.x packets to the router connecting the two interfaces.</P><P></P><P>Cheers</P><P></P><P>Tim</P><P></P></BODY></HTML> Fri, 03 Feb 2006 10:38:48 GMT https://community.cisco.com/t5/network-security/routing-question-in-asa-5500/m-p/405490#M428442 timdeadman 2006-02-03T10:38:48Z Re: Routing question in ASA 5500! https://community.cisco.com/t5/network-security/routing-question-in-asa-5500/m-p/405491#M428444 <HTML><HEAD></HEAD><BODY><P>i did test the command "same-security-traffic permit intra-interface" and it will not work with any traffic other than crypto traffic.</P></BODY></HTML> Sat, 04 Feb 2006 00:12:42 GMT https://community.cisco.com/t5/network-security/routing-question-in-asa-5500/m-p/405491#M428444 jackko 2006-02-04T00:12:42Z