Transparent firewall

[Bikash Shaw]

HI Everyone,

Please help me on below problem

R1's Loopback(1.1.1.1)==R1(10.1.1.1)===inside=====ASA transparent firewall(10.1.1.10)==Outside====R2(10.1.1.2)==(2.2.2.2)R2's Loopback.

I am able to telnet from R1loopback to R2 loopback. i am unable to telnet from R2loopback to R1 loopback and have allowed telnet from outside. i turn on the logging i found that the 3way handshake was not getting complete.

Regards

Bikash

[Akshay Rastogi]

Hi Bikash,

Please check the below information:

1.) If telnet is enabled on R1.

2.) output of 'show conn address 2.2.2.2' (after initiating a connection)

3.) Take the captures on Inside, outside. Also asp captures.

use the below commands:

#capture capi interface inside match tcp host 2.2.2.2 host 1.1.1.1

#capture capo interface outside match tcp host 2.2.2.2 host 1.1.1.1

#cap asp type asp-drop-all

show commands:

#show cap capi

#show cap capo

#show cap asp | in 2.2.2.2

With these outputs, you would be able to identity the reason.

I hope this answers your query. If you still have any query , please let me know.

Regards,

Akshay Rastogi