11-04-2011 12:26 AM - edited 03-11-2019 02:45 PM
Hi,
I have configured in Asa 5520 as below
object-group network MOBILE_IN
access-list MOBILE extended permit ip object-group MOBILE_IN any
nat (inside) 5 access-list MOBILE
so whenever i tried to open youtube it open but when i click on a video it's not played..
11-04-2011 10:16 PM
Hey,
I dont think the NAT has anything to do with this. At the end of the log you put, there is a reason for the teardown. We need the following info to give you a little bit help here:
1-What is the rest of that log
2-Do you have any kind of web filter?
3-What happens if you NAT the same traffic to the interface IP?
4-Do you have any kind of police (QoS)?
5-Does the video appears but it doesnt load?
6-Do you have a CSC module?
7-Have you changed either MTU or MSS of the firewall?
8-Do you see errors on the interfaces?
9-Does it happens to all Devices?
This will give us a liitle bit more info in order to find out the issue.
Mike.
11-05-2011 12:40 AM
Hi,
1 I got below two logs when i hit youtube.com
6 Nov 05 2011 12:09:26 302016 203.18.137.1 161 172.16.5.98 3953 Teardown UDP connection 12187127 for outside:203.18.137.1/161 to inside:172.16.5.98/3953 duration 0:02:01 bytes 194
6 Nov 05 2011 12:09:32 302016 203.18.137.1 161 172.16.5.98 3954 Teardown UDP connection 12187336 for outside:203.18.137.1/161 to inside:172.16.5.98/3954 duration 0:02:01 bytes 191
2 . NO i don,t have any webfilter
3 . hi i donot try to nat it to interface ip ..
4.no i donot have any Qos.
5. yes youtube.com open but very slow after opening i am able to see video but when i click on video it does not play.
6. yes i have cisco IPS.
7 no i donot changed MTU.
8. no error on interface.
9. Do you mean on all pc,s that are in mobile group ?
I have issue only in youtube website other video sites like msnvideo open perfectly..
Regards,
Prashant
11-06-2011 02:04 PM
Hi,
Is it possible that you can try this it bypassing the Cisco IPS and let us know.
I have faced this issue at a customer site once really can't remember what was the solution! Try the IPS first please.
Sent from Cisco Technical Support iPad App
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: