I have an ASA setup behind a T1 with pass though on port 0/0 on the ISP router
Internal ASA IP address
is 10.130.1.1
The IPS also has an MPLS setup to another network with IP address of 10.130.1.2 on port 0/1 of the ISP router. The ip address of the other network is 192.168.5.0
I setup the static route for 192.168.5.0 to 10.130.1.2 on the ASA device but get the following error:
3 Jul 21 2010 17:28:38 305006 192.168.5.10 portmap translation creation failed for tcp src inside:10.130.1.5/13135 dst inside:192.168.5.10/3389
If I setup an exempt NAT rule from 10.130.1.0 to 192.168.5.0 and one from 192.168.5.0 to 10.130.1.0 I can ping across the two networks, but get the following error if I try to do anything else like RDC
6 Jul 21 2010 17:39:46 302013 10.130.1.5 192.168.5.10 Built inbound TCP connection 243379 for inside:10.130.1.5/13412 (10.130.1.5/13412) to inside:192.168.5.10/3389 (192.168.5.10/3389)
6 Jul 21 2010 17:39:46 302014 10.130.1.5 192.168.5.10 Teardown TCP connection 243379 for inside:10.130.1.5/13412 to inside:192.168.5.10/3389 duration 0:00:00 bytes 0 TCP Reset-O
Not sure how to allow traffic to be sent to the MPLS.
If I change the gateway on a local PC to 10.130.1.2 I can communicate without issue to the 192.168.5.0 network, but lose internet so I know the MPLS is working.
Internet router ------>Public IP ----> ASA 5505-----> 10.130.1.1 -----> Internal network
|-------------->MPLS 192.168.5.0---------------->10.130.1.2-------------------------------^
