I'm having issue accessing the published application at DMZ via ASA2 at DC2. See screenshot below.
I have no issue accessing any DMZ application via ASA1.
No problem accessing any application in ASA1 at DC1.
Communication is fine, I can ping 10.x.0.5 from both DC1 and DC2 and from ASA1 and ASA2.
at ASA1 I configured the https for outside interface; routing is ok + NAT like this.
access-list outside_access_in line 51 extended permit tcp any host 10.x.0.5 eq https
route 10.0.0.0/8 via Core 1 at DC1
object network 10.x.0.5
host 10.x.0.5
nat (inside,outside) static x.x.x.x service tcp https https
ASA2
[allow any traffic from ASA1 to access DMZ 10.x.0.5]
access-list inside_access_in line 2 extended permit tcp any host 10.x.0.5 eq https
nat (any,dmz) source static any any destination static 10.x.0.5 10.x.0.5 no-proxy-arp route-lookup
route 0.0.0.0 0.0.0.0 to ASA1 (DC1)
is there anything I missed here? I believe this is NAT issue. Any suggestion what's the best approach in this scenario?
