05-04-2018 06:21 PM - edited 02-21-2020 07:42 AM
Hey guys,
I recentlly purchased 2 ASA 5506-X to replace Meraki MX50 appliances and I'm running into an issue. Basically UDP traffic including port 67 is being discarded inter VLAN
My configuration:
ASA-tunk port-SWITCH-trunk port-WLC
-access port AP
The VLANS(subinterfaces) and DHCP server are on the ASA. The ASA has the inter VLAN command and also all VLANS have the same security number withput any ACLs
Log output attached
05-04-2018 06:22 PM
05-04-2018 06:37 PM
Some logs output
172.18.11.3|67|||Failed to locate egress interface for UDP from HB-Private:172.18.11.3/67 to 172.18.10.1/67
172.18.10.4|28359|255.255.255.255|5246|UDP request discarded from 172.18.10.4/28359 to HB-Management:255.255.255.255/5246
05-04-2018 07:15 PM
Hi
Have you allowed same security interfaces to talk to each other with the "same-security-traffic permit inter-interface" command?
Thanks
John
05-04-2018 07:40 PM
John,
I applied the following commands:
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide