cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
485
Views
0
Helpful
2
Replies

PIX to ASA Migration Problem

jimb
Level 1
Level 1

I have migrated out PIX 525 to the ASA appliance. All went well except for the following problem. I need to be able to see traffic on one of my DMZs by both the real, and the translated IP addresses. The PIX allowd this but the ASA does not. Desperate need of some help here...

Any ideas?

2 Replies 2

jgervia_2
Level 1
Level 1

Please post the error message and configuration so we can help determine what's going on.

It's not an error. On one of my DMZs I translate 172.16.x.x to 10.1.x.x. When we had the PIX, we could access nodes on that DMZ by both addresses from the inside network. When we migrated to the ASA, we can no longer hit the network by 10.1.x.x addresses and are forced to use the translated addresses, 172.16.x.x. This is a problem because users have become dependent on both address spaces. Strange but true.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: