Disabling Proxy-ARPs on Cisco ASA's outside interface prevents going outside

[zolfaghar]

Hi there,

While I disable Proxy-ARPs on Cisco ASA's outside interface, no connection to outside (Internet) can be established.

ASA model is 5540 (version 8.4(1)) and default route to ISP is configured statically.

Note: NATs are done in the ASA and ASA is connected directly to ISP.

Sincerely

[Philip D'Ath]

If the default gateway is definitely correct, make sure the subnet mask is correct.

The default gateway and your outside IP address must be in the same subnet.

[zolfaghar]

Dear Philip,

First I have to express my thanks for your reply,

The default gateway and outside IP address are in the same subnet. Is the problem can be related to NATs or ACLs in the ASA?

[Philip D'Ath]

It can't be ACLs. It could be NAT.

[zolfaghar]

Abstract topology is attached.

(What issue on ASA NATs can lead default route to be ignored?)

[Philip D'Ath]

You really want to avoid dual connected servers like that.  You could just as easily have an asymmetric routing issue.

[zolfaghar]

Could you explain a little more?