01-07-2014 10:24 PM - edited 03-07-2019 05:26 PM
Please help
my ASA is not routing internal routes on the same VLAN
ASA 10.202.69.1
2811(Router) 10.202.69.31 connects to 10.202.200.0 remote network
Users: 10.202.69.0/24
users default gateway is ASA
i need to forward 10.202.200.0 network on ASA to cisco 2811
i have added the following commands on ASA
same-security-traffic permit intra-interface
route inside 10.202.192.0 255.255.192.0 10.202.69.31 1
ping from ASA works but from users pc NO
can you please help
please find ASA show run attached
Solved! Go to Solution.
01-08-2014 01:03 AM
Hi,
ASA 10.202.69.1
2811 10.202.69.31 has 10.202.200.0 network
users default gateway is ASA
users are on the 10.202.200.0 network ? if so how can they arp for their default gateway which is not on the same subnet ?
Regards
Alain
Don't forget to rate helpful posts.
01-07-2014 10:55 PM
Hi,
Please post your ASA's log here to be more accurate.
Regards,
Oscar
Sent from Cisco Technical Support iPad App
01-07-2014 10:59 PM
what debugs would you like me to run
01-08-2014 01:03 AM
Hi,
ASA 10.202.69.1
2811 10.202.69.31 has 10.202.200.0 network
users default gateway is ASA
users are on the 10.202.200.0 network ? if so how can they arp for their default gateway which is not on the same subnet ?
Regards
Alain
Don't forget to rate helpful posts.
01-08-2014 03:28 AM
users have their gateway ASA 10.202.69.1 ... users are on 10.202.69.0/24 trying to access 10.202.200.0/24
01-08-2014 03:42 AM
Can you do a packet-tracer on the ASA and paste output
packet-tracer input inside icmp 10.202.69.200 8 0 10.202.200.20 detailed
packet-tracer input inside icmp 10.202.200.20 0 0 10.202.69.200 detailed
Regards
Alain
Don't forget to rate helpful posts.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: