cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1427
Views
0
Helpful
1
Replies

FWSM Firewall Context "Flow is a loopback" Conundrum

adrian.jones
Level 1
Level 1

Hi All,

     Trying to get a remote VPN user to connect to a server and it is  failing with the following error:

%ASA-6-302014: Teardown TCP connection 101118575 for outside:10.48.2.74/4945 to outside:10.45.72.68/3622 duration 0:00:00 bytes 0 Flow is a loopback

     I understand the connection is trying to exit on the same interface it is arriving on. The connection is over VPN and traverses across the firewall to terminate on a server where it is assigned it's address from a dedicated DHCP pool. Connectivity then comes back through the firewall to get back to the network. The default route sends traffic back out of the same interface and in the large majority of cases communication is successful. In this instance I get the error above.

     I have permitted the "same-security-traffic permit intra-interface" command but this does not work. We are routing the traffic and not natting it. Traffic exiting to internet through the same path works for the users but to this specific server it does not work. I am lost as to why. I could create a dedicated interface and route traffic to this specific server subnet over this but that does not resolve the issue.

     Any advise out their appreciated. I cannot post full config but will post what I can. Routes are normal and overall working.

Regards

Adrian

1 Reply 1

Bro

Can you post a simple network diagram here, depicting the flow. I can't seem to picture the network flow based on your explanation.

Warm regards,
Ramraj Sivagnanam Sivajanam
Review Cisco Networking for a $25 gift card