01-07-2014 10:24 PM - edited 03-07-2019 05:26 PM
Please help
my ASA is not routing internal routes on the same VLAN
ASA 10.202.69.1
2811(Router) 10.202.69.31 connects to 10.202.200.0 remote network
Users: 10.202.69.0/24
users default gateway is ASA
i need to forward 10.202.200.0 network on ASA to cisco 2811
i have added the following commands on ASA
same-security-traffic permit intra-interface
route inside 10.202.192.0 255.255.192.0 10.202.69.31 1
ping from ASA works but from users pc NO
can you please help
please find ASA show run attached
Solved! Go to Solution.
01-08-2014 01:03 AM
Hi,
ASA 10.202.69.1
2811 10.202.69.31 has 10.202.200.0 network
users default gateway is ASA
users are on the 10.202.200.0 network ? if so how can they arp for their default gateway which is not on the same subnet ?
Regards
Alain
Don't forget to rate helpful posts.
01-07-2014 10:55 PM
Hi,
Please post your ASA's log here to be more accurate.
Regards,
Oscar
Sent from Cisco Technical Support iPad App
01-07-2014 10:59 PM
what debugs would you like me to run
01-08-2014 01:03 AM
Hi,
ASA 10.202.69.1
2811 10.202.69.31 has 10.202.200.0 network
users default gateway is ASA
users are on the 10.202.200.0 network ? if so how can they arp for their default gateway which is not on the same subnet ?
Regards
Alain
Don't forget to rate helpful posts.
01-08-2014 03:28 AM
users have their gateway ASA 10.202.69.1 ... users are on 10.202.69.0/24 trying to access 10.202.200.0/24
01-08-2014 03:42 AM
Can you do a packet-tracer on the ASA and paste output
packet-tracer input inside icmp 10.202.69.200 8 0 10.202.200.20 detailed
packet-tracer input inside icmp 10.202.200.20 0 0 10.202.69.200 detailed
Regards
Alain
Don't forget to rate helpful posts.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide