cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
754
Views
5
Helpful
5
Replies

ASA not routing internally

Please help

my ASA is not routing internal routes on the same VLAN

ASA 10.202.69.1

2811(Router)  10.202.69.31   connects to 10.202.200.0  remote network

Users: 10.202.69.0/24

users default gateway is ASA

i need to forward 10.202.200.0 network on ASA to cisco 2811

i have added the following commands on ASA

same-security-traffic permit intra-interface

route inside 10.202.192.0 255.255.192.0 10.202.69.31 1

ping from ASA works but from users pc NO

can you please help

please find ASA show run attached

1 Accepted Solution

Accepted Solutions

Hi,

ASA 10.202.69.1

2811  10.202.69.31    has 10.202.200.0 network

users default gateway is ASA

users are on the 10.202.200.0 network ? if so how can they arp for their default gateway which is not on the same subnet ?

Regards

Alain

Don't forget to rate helpful posts.

Don't forget to rate helpful posts.

View solution in original post

5 Replies 5

Oscar Castillo
Level 1
Level 1

Hi,

Please post your ASA's log here to be more accurate.

Regards,
Oscar

Sent from Cisco Technical Support iPad App

what debugs would you like me to run

Hi,

ASA 10.202.69.1

2811  10.202.69.31    has 10.202.200.0 network

users default gateway is ASA

users are on the 10.202.200.0 network ? if so how can they arp for their default gateway which is not on the same subnet ?

Regards

Alain

Don't forget to rate helpful posts.

Don't forget to rate helpful posts.

users have their gateway ASA 10.202.69.1 ... users are on 10.202.69.0/24 trying to access 10.202.200.0/24

Can you do a packet-tracer on the ASA and paste output

packet-tracer input inside icmp 10.202.69.200 8 0 10.202.200.20 detailed

packet-tracer input inside icmp 10.202.200.20 0 0 10.202.69.200 detailed

Regards

Alain

Don't forget to rate helpful posts.

Don't forget to rate helpful posts.
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card