topic Access problem with Cisco ASA in Network Security

Access problem with Cisco ASA

rakesh.thale — Mon, 11 Mar 2019 14:09:43 GMT

Hi all, I m facing problem with ASA, here is scenario for the same,

I have 2 cisco ASA 5540 with multiple context.

Configured in active -active failover. My primary admin context is

working without any hassel. But when I tried to connect to outside

interface (secondary firewall)of admin contex it gives me an error

log - "ifc-classify --Virtual firewall classification failed."

From the same device if I connected from 'inside' - I am

able to. But not able to send any outside traffic. (Not able to

connect to gateway IP of outside interface.)

Please help.

Thanks in advance.

dhananjoy chowdhury — Fri, 07 Nov 2008 06:19:07 GMT

This happens when a packet arrived on a shared interface, but failed to classify to any specific context interface.

Use the global or static command to specify the IPv4 addresses that belong to each context interface.

rakesh.thale — Fri, 07 Nov 2008 06:33:15 GMT

Sorry, But I get this option. But dont know how configure global or static command.

Please, please help!

dhananjoy chowdhury — Fri, 07 Nov 2008 06:56:14 GMT

I would suggest you go thru this link (example 3) - Shared Resources for Multiple Contexts.

This example also has the nat/global config.

rakesh.thale — Fri, 07 Nov 2008 09:14:36 GMT

Still Unfortunate--

I tried to put static and global commands but no result.

dhananjoy chowdhury — Fri, 07 Nov 2008 18:09:00 GMT

could you share the sanitized config.