topic Re: ASA and same-security-traffic permit inter-interface in Network Security https://community.cisco.com/t5/network-security/asa-and-same-security-traffic-permit-inter-interface/m-p/1196108#M860935 <HTML><HEAD></HEAD><BODY><P>"the only way to make it is to use "same-security-traffic permit inter-interface" and use acls with deny last line of each acl chain " -that's the answer.</P></BODY></HTML> Mon, 13 Apr 2009 11:27:20 GMT vikram_anumukonda 2009-04-13T11:27:20Z ASA and same-security-traffic permit inter-interface https://community.cisco.com/t5/network-security/asa-and-same-security-traffic-permit-inter-interface/m-p/1196107#M860934 <P>I have the same security interfaces:</P><P>interface Ethernet0/0</P><P> nameif dmzlan</P><P> security-level 40</P><P> ip address 192.168.164.56 255.255.252.0 </P><P>!</P><P>interface Ethernet0/3</P><P> nameif dmzinet</P><P> security-level 40</P><P> ip address 213.182.168.1 255.255.255.0 </P><P> </P><P> And used "no same-security-traffic permit inter-interface"</P><P> But with this setting acls with "permit" don't work between this interfaces.</P><P> </P><P> Can I allow some traffic between this interfaces using ACLs?</P><P> </P><P> </P><P> ============</P><P> Or the only way to make it is to use "same-security-traffic permit inter-interface" and use acls with deny last line of each acl chain?</P> Mon, 11 Mar 2019 15:17:35 GMT https://community.cisco.com/t5/network-security/asa-and-same-security-traffic-permit-inter-interface/m-p/1196107#M860934 andrew278 2019-03-11T15:17:35Z Re: ASA and same-security-traffic permit inter-interface https://community.cisco.com/t5/network-security/asa-and-same-security-traffic-permit-inter-interface/m-p/1196108#M860935 <HTML><HEAD></HEAD><BODY><P>"the only way to make it is to use "same-security-traffic permit inter-interface" and use acls with deny last line of each acl chain " -that's the answer.</P></BODY></HTML> Mon, 13 Apr 2009 11:27:20 GMT https://community.cisco.com/t5/network-security/asa-and-same-security-traffic-permit-inter-interface/m-p/1196108#M860935 vikram_anumukonda 2009-04-13T11:27:20Z