DMZ Access (Strange Issue)

[rbaeditores]

Hello,

We can´t reach DMZ servers from other DMZ servers. It's very strange.

If I make a ping from DMZ server to another, sometimes only recieve one ping, sometimes 4, sometimes 0.

How can I allow the traffic between DMZ servers??

(ASA 5520 Version 8.4)

Regards

[raga.fusionet]

Chris are we talking about servers that are on the same DMZ or two different DMZs?

You said that sometimes it works sometimes it doesnt, it sounds like a problem on the client side, have you checked for faulty NICs, cabling, or even duplicated IP addresses?

What happens on the ASA if you debug icmp trace while trying to ping?

Thanks,

Raga

[puseth]

Chris,

If the source and destination are behind a Same DMZ interface and they are connected on a L2 switch, these packets should be routed b/w them from this Switch and packets should not go the the ASA.

Sometimes in cases of ASA doing proxy arp these packets can go to the ASA.

Can you take the output of arp -a from the Server when you can ping the other server fine and when you cannot.

Puneet