Access IPs from a connected ASA 5510

[cscsocial]

This question came from our Cisco Support Community Twitter account.  https://twitter.com/cisco_support

Can ping all external IPs from an Adtran 3305, but can't ping or access some IPs from a connected ASA 5510 routed single mode.  Can you please help?

[Richard Burts]

There is not much information here so figuring out the problem is difficult.

Is it possible that attempting to access these IP addresses would go back out the same interface on which the request arrived? This is some times called hairpinning and by default is not allowed on the ASA. You can use these config commands to allow that to happen:

same-security-traffic permit inter-interface
same-security-traffic permit intra-interface

If that is not the issue then some additional information would be helpful:

- what is the relationship between the Adtran and the ASA?

- where are you (relative to the ASA) when you attempt to access these addresses?

- where are these addresses (relative to the ASA) when you attempt to access these addresses?

- do you have logging enabled on the ASA? and if so are there any messages in the logs of the ASA about the attempt to access these addresses?

HTH

Rick

[kbrubaker]

Thanks for the response. The problem was a bad subnet mask on the external in
terface of the ASA.