10-06-2023 01:37 PM - edited 10-06-2023 01:39 PM
Hello.
My goal is to allow the router directly connected to the outside interface of the ASA5525 to send status messaged to an internal server. I've configured the outside ACL, and also routing. When I do a packet-tracer I receive a DROP at final step (has to do with NAT).
If the solution is to config an identity NAT, I worry that ALL traffic routing through this next hop will be identity-natted (though this may be an incorrect understanding.) See below...
Phase: 16
Type: NAT
Subtype: rpf-check
Result: DROP
Config:
nat (inside,outside) source dynamic any interface
---
May you please tell me how to fix this?
Thank you.
Solved! Go to Solution.
12-11-2023 07:13 AM
Yes. I dont remember the solution. Thank you for your follow up.
12-10-2023 02:40 PM
are this issue solved?
12-11-2023 07:13 AM
Yes. I dont remember the solution. Thank you for your follow up.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide