topic Re: Issue with ASA in Network Security https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143914#M876828 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>Unfortunately i cant provide the configs because its not our firewall.</P><P></P><P>All i can tell you is that there is a default route to the firewall which is advertised via bgp.</P><P></P><P>So traffic follows the default route the follows the connected route because it is more specific than the default so it is relying on ARP for the ip addresses and they are incomplete for anything it seems behind the customer firewall.</P><P></P><P>Cheers</P><P></P><P>Kev</P></BODY></HTML> Mon, 09 Feb 2009 08:50:22 GMT kevinhobson2000 2009-02-09T08:50:22Z Issue with ASA https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143909#M876823 <P>Hi,</P><P></P><P>I have an issue with my ASA where if i point a default route from the WAN router to the firewall i get incomplete arp records on the router and i cant get to anything behind the firewall. But if i put the specific statics in to the subnets behind the firewall everything works fine.</P><P></P><P>What is the problem with my firewall does it need proxy arp enabling to respond on behalf of these subnets.</P><P></P><P>Thanks</P><P></P><P>Kev</P> Mon, 11 Mar 2019 14:46:25 GMT https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143909#M876823 kevinhobson2000 2019-03-11T14:46:25Z Re: Issue with ASA https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143910#M876824 <HTML><HEAD></HEAD><BODY><P>Kevin,</P><P></P><P>I am assuming the inside interface of the WAN router and the outside interface of the ASA share the same public address space? I am also assuming you are attempting to access RFC-1918 address space on the inside interface of the ASA?</P><P></P><P>To get traffic from a lower security interface (outside) to a higher security interface (inside) on PIX/ASA firewalls you need static statements.</P><P></P><P></P></BODY></HTML> Thu, 05 Feb 2009 19:26:53 GMT https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143910#M876824 eddie.mitchell 2009-02-05T19:26:53Z Re: Issue with ASA https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143911#M876825 <HTML><HEAD></HEAD><BODY><P>Eddie,</P><P></P><P>Hi this is a customer of ours.</P><P></P><P>Its not a public its on a 10 range.</P><P></P><P>We supply them with internet access but that is a different router.</P><P></P><P>Let me know anymore info you need.</P><P></P><P>Cheers</P><P></P><P>Kev</P></BODY></HTML> Fri, 06 Feb 2009 07:44:14 GMT https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143911#M876825 kevinhobson2000 2009-02-06T07:44:14Z Re: Issue with ASA https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143912#M876826 <HTML><HEAD></HEAD><BODY><P>Kev,</P><P></P><P>Is "nat-control" enabled on the ASA? </P><P></P><P>Please reference the following document:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008046f31a.shtml#backinfo" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008046f31a.shtml#backinfo</A></P><P></P></BODY></HTML> Fri, 06 Feb 2009 13:26:02 GMT https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143912#M876826 eddie.mitchell 2009-02-06T13:26:02Z Re: Issue with ASA https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143913#M876827 <HTML><HEAD></HEAD><BODY><P>Plz provide the configs </P><P></P><P>it would help to narrow down the problem much better</P></BODY></HTML> Fri, 06 Feb 2009 13:34:32 GMT https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143913#M876827 Pravin Phadte 2009-02-06T13:34:32Z Re: Issue with ASA https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143914#M876828 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>Unfortunately i cant provide the configs because its not our firewall.</P><P></P><P>All i can tell you is that there is a default route to the firewall which is advertised via bgp.</P><P></P><P>So traffic follows the default route the follows the connected route because it is more specific than the default so it is relying on ARP for the ip addresses and they are incomplete for anything it seems behind the customer firewall.</P><P></P><P>Cheers</P><P></P><P>Kev</P></BODY></HTML> Mon, 09 Feb 2009 08:50:22 GMT https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143914#M876828 kevinhobson2000 2009-02-09T08:50:22Z Re: Issue with ASA https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143915#M876829 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>Did you ever resolve? Sounds somewhat familiar to a problem that I am having.</P></BODY></HTML> Wed, 18 Feb 2009 19:18:34 GMT https://community.cisco.com/t5/network-security/issue-with-asa/m-p/1143915#M876829 wandawg 2009-02-18T19:18:34Z