DMZ hosts are not comminicating each other.

[shijomon scaria]

Dear All,

I have a problem with my DMZ nodes communication. When i try to ping each other getting only one reply and then drops. What can be the issue ?

Same security intra interface is enable.

Please help.

Thanks in advance.

Shijo.

[Ali Razavi]

Without seeing the configuration, I would go through the following checklist:

1- Can you ping both DMZ hosts from the ASA?

2- Is the ASA DMZ interface address set as default GW on DMZ hosts?

3- Do you have any filtering/security enabled on your DMZ switch?

4- Do you see the target host's MAC address in the ARP table of the source host?

[shijomon scaria]

Dear Ali,

Thanks for your reply.

Glad to inform you that the issue has been resolved.

One identity nat policy configured form inside to dmz was creating the problem.

Thank you.

Shjo.

[Ali Razavi]

Thanks for sharing your solution Shjo.