topic Re: ASA and VLANs, same security level in Network Security

ASA and VLANs, same security level

rcordeiro — Mon, 11 Mar 2019 15:56:43 GMT

Hi all,

2 ASA5520 (active/standby). I have 10 VLANs, all with same security level (100) they are all internal networks, I them to talk each other without NAT but I'm getting a strange behaviour, I have a NAT dynamic so they can get to the Internet and a NAT EXEMPT when the traffic needs to go to the other VLANs. The strange thing is that I have "SYN Timeout" to some machines on TCP traffic but I always have ICMP connectivity. Accessing from one VLAN to the other can give me access to one machine without problem and no TCP connections to another on the same VLAN.

Any advise?

Regards

Re: ASA and VLANs, same security level

rob.stoop — Tue, 21 Jul 2009 16:54:46 GMT

you also configured same security traffic?

same-security-traffic permit inter-interface

Re: ASA and VLANs, same security level

rcordeiro — Wed, 22 Jul 2009 12:38:22 GMT

Hi,

Yes, I have enabled inter-interface traffic and for some machines it works but not for others (only on TCP traffic) because with ICMP it always works.

Regards