Hello
I have BGP peering with two ISP (defaults from the both of them), the problem is that I need to put only ASA on the perimeter? and ASA is not like asymmetrical traffic.
When I had configured TCP bypass I get a lot of the "No valid adjacency" messages, I can ping any address in the internet from PC in the DMZ,but as for websites - the pages in the internet do not open from PC (but some of the pages open sometimes).
When I stopped announce our PI IP addresses to one of the providers - all works well, the problem with the asymmetrical traffic.
There is the scheme in the attachment, config file and capture from ASA
The interface of ASA connected to DMZ have IP addrees from the block our announced PI IP adresses, and we do not use NAT on this ASA.
Please help me to resolve this issue.
.jpg){kind=link}