02-09-2015 09:01 AM - edited 03-11-2019 10:28 PM
ASA is dropping all traffic to the interfaces.
Routing is fine as traffic FROM the ASA reaches anywhere needed fine.
Via the packet capture it can be seen that the implicit deny rule is blocking traffic. I have added an any-any rule (as this is testing) yet still I can see via packet capture that the implicit deny is blocking traffic. I am not sure why this is happening. I have associated the access-lists to the correct interfaces yet all traffic is being dropped.
02-09-2015 09:59 AM
Hi
Do not associate the access-list to inside interface at all and report back. Please do this report back the following
show route
show nat
show run nat
show xlate
show run access-list
show access-list
also it would help us if you share the running config.
02-09-2015 01:16 PM
Unassociated the access-list - made no difference.
02-09-2015 01:17 PM
Turns out the issue was a NAT created directly with an interface which drops all traffic.
02-09-2015 01:27 PM
OK. is it all working now?
02-09-2015 01:33 PM
Yea it seems to be working now. Once I reconfigured that specific NAT
02-09-2015 01:35 PM
good. you don't mind can you let me know which one?
02-09-2015 01:39 PM
of course it was the following:
static (outside,inside) interface VPN_Tunnel-NAT netmask 255.255.255.255
02-09-2015 01:50 PM
thanks for that. I'm glad it's all sorted.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide