Hello everybody.
We want migrate our network from pix515e to asa5520.
Access rules is same on both devices.
When we change default gateway from ip address pix to ip address asa, we get assimetric traffic and both devices drops tcp packets.
On asa 5520 we set this configuration:
access-list tcp-bypass-syn-ack extended permit tcp src_network-host dst_network-host
access-list tcp-bypass-syn-ack extended permit tcp dst_network-host src_network-host
class-map tcp_bypass_syn_ack
match access-list tcp-bypass-syn-ack
policy-map tcp_bypass_syn_ack_policy
class tcp_bypass_syn_ack
set connection advanced-options tcp-state-bypass
service-policy tcp_bypass_syn_ack_policy interface ingress_interface
service-policy tcp_bypass_syn_ack_policy interface egress_interface
And traffic throuht asa5520 sends ok.
Which commands we have to set up on pix515e, what it is configuration was same as ASA5520 ?
Thanks.
