Bwalters613 wrote:
ASA5510 with IPS module and 3750G stacked switches. Everything is working normal...so we introduced two new Barracuda devices inline (Web Filter and IM Filter) on the same subnet at the 3750 Core switch and the ASA Inside interface. Here's where it gets fun. Switch can ping the ASA, and pass traffic to the Internet just fine, through the two Barracuda devices. The two Barracuda devices can ping each other, but cannot ping the ASA or the switch. Neither the switch nor the ASA can ping either Barracuda device.
Switch - 10.1.200.1/28
ASA inside - 10.1.200.2/28
CudaA - 10.1.200.10/28
CudaB - 10.1.200.11/28
Have tried defaulting the gateway for the Cuda's to either switch or ASA without success. Both Cuda's work on two separate networks in this same design and inline placement (one behind a PIX and before a switch and the other behind an ASA5505 and before a switch). Have tried intra-interface traffic allowing and not and have talked to both the LAN switching team and ASA team at TAC...neither of which seems to find anything.
Suggestions?
You've probably been asked these sort of questions already but -
1) when you try to ping the barracuda devices from the switch or the ASA what do the arp tables show on the switch/ASA
2) when you try to ping the switch or ASA from the barracuda what do the arp tables show on the barracudas
3) have you tried packet capture on the ASA to see if when you ping from the barracudas the ICMP request actually gets to the ASA
By the sounds of it the barracudas are running in transparent mode ie. L2 between the switch and ASA so the default-gateway should make no difference.
Jon
