topic Re: ASA 5506-X unable to use with Wireless Controller and lightweight access points - UDP 67 discarded in Network Security

ASA 5506-X unable to use with Wireless Controller and lightweight access points - UDP 67 discarded

iancuv001 — Fri, 21 Feb 2020 15:42:50 GMT

Hey guys,

I recentlly purchased 2 ASA 5506-X to replace Meraki MX50 appliances and I'm running into an issue. Basically UDP traffic including port 67 is being discarded inter VLAN

My configuration:

ASA-tunk port-SWITCH-trunk port-WLC

-access port AP

The VLANS(subinterfaces) and DHCP server are on the ASA. The ASA has the inter VLAN command and also all VLANS have the same security number withput any ACLs

Log output attached

Re: ASA 5506-X unable to use with Wireless Controller and lightweight access points - UDP 67 discarded

iancuv001 — Sat, 05 May 2018 01:22:49 GMT

Adding log file

Re: ASA 5506-X unable to use with Wireless Controller and lightweight access points - UDP 67 discarded

iancuv001 — Sat, 05 May 2018 01:37:13 GMT

Some logs output

172.18.11.3|67|||Failed to locate egress interface for UDP from HB-Private:172.18.11.3/67 to 172.18.10.1/67

172.18.10.4|28359|255.255.255.255|5246|UDP request discarded from 172.18.10.4/28359 to HB-Management:255.255.255.255/5246

Re: ASA 5506-X unable to use with Wireless Controller and lightweight access points - UDP 67 discarded

johnd2310 — Sat, 05 May 2018 02:15:20 GMT

Have you allowed same security interfaces to talk to each other with the "same-security-traffic permit inter-interface" command?

Thanks

John

Re: ASA 5506-X unable to use with Wireless Controller and lightweight access points - UDP 67 discarded

iancuv001 — Sat, 05 May 2018 02:40:30 GMT

John,

I applied the following commands:

same-security-traffic permit inter-interface
same-security-traffic permit intra-interface

Thanks