“Translation creation failed” message

[hanwucisco]

I have this issue,

Two Vlans (ID 1 and 100)are on a Cat 4500, which connects to an ASA, interface DMZ. On 4500, there is default route point to the ASA DMZ interface, please see the attached files.

Issue, server on vlan 100 cannot ping a server on Vlan 1, vice verse.

When I enable the realtime log, it gives me a “Translation creation failed” message, please see the attached files.

Can anyone tell what should I look for?

Thanks,

Han

[varrao]

Hi,

You woudl need to hairpin the traffic coming on the DMZ interface back into the same interface, you can refer to this post for configuration assistance:

https://supportforums.cisco.com/message/3227396#3227396

Hope  that helps.

Thanks,
Varun Rao
Security Team,
Cisco TAC