cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
7093
Views
0
Helpful
9
Replies

Drop-reason: (acl-drop) Flow is denied by configured rule

CY Ko
Level 1
Level 1

Actually, I want to allow FTP from outside to inside, but the packet tracer display "Drop-reason: (acl-drop) Flow is denied by configured rule".   I must be wrong something.  I have attached my config.  Any assistance would be greatly appreciated.

9 Replies 9

try this

 

 

object network ANY
 subnet 0.0.0.0 0.0.0.0
nat (outside,inside) source dynamic ANY   interface destination static FTP_Inside FTP_Inside service FTP FTP

                                                       ---    --------

 

"Where ANY is outside world could be any public ip address and interface mean your ASA outside interface"

also

 

remove this

 

no same-security-traffic permit inter-interface
no same-security-traffic permit intra-interface

 

make sure you do this in change window.

 

 

Regards.

please do not forget to rate.