topic Re: ASA Static Route to Inside Interface in Network Security

ASA Static Route to Inside Interface

fasteddye — Mon, 11 Mar 2019 20:14:35 GMT

I have inherited an ASA 5520. In doing some auditing of the setup, I have noticed a Static Route that has the inside interface of the ASA as the Gateway IP. I am trying to understand the purpose of this route or why a route would be setup this way.

Example Static Route:

Inside 10.xx.31.0 255.255.255.0 10.xx.xx.10 (10.xx.xx.10 is the inside interface of ASA)

Re: ASA Static Route to Inside Interface

PAUL GILBERT ARIAS — Wed, 30 Mar 2011 12:41:50 GMT

Probably that route was a mistake since it won't do anything

Sent from Cisco Technical Support iPhone App

Re: ASA Static Route to Inside Interface

Pavel Pokorny — Wed, 30 Mar 2011 13:51:23 GMT

Hi,

In ASA, you have to specify interface, not only next hop ip address:

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/ip.html#wp1047894

So, in your case, there has been (or is present) network 10.xx.31.0 255.255.255., which is accessible via inside interface and ip address 10.xx.xx.10 on this interface.

HTH

Pavel