About wstucky01

wstucky01 · 06-02-2018

I have an interesting request from a remote-site not wanting to allow access to a public facing IP. We have a tunnel between their ASA & ours which hairpins traffic to 2 networks out the outside interface. (IPs have been changed to protect the innoc...

wstucky01 · 07-25-2018

UPDATE: I ended up routing this traffic Inside instead of haripinning. Funny thing is it still didn't work until I removed the network objects referenced in the NAT statement & added them back. Since that fixed it, I didn't care to try it with the ...

wstucky01 · 07-25-2018

I know this is an old post, but saw your last comment while searching for other info. license boot module module-name level license-level "?" out the command to see what fits your needs. I'm not personally familiar with the 1900 series, but on a ...

wstucky01 · 06-20-2018

No, it will not accept that command. I think I can only use that if I'm keeping the NATs the same on the statement. Sorry for the delay- I was waiting on feedback if I could have the remote ASA NAT to the real IP before the tunnel but was just den...

wstucky01 · 06-03-2018

yes. Updated original post with more details, but here's the essential nat flow: 10.0.0.2 > 172.16.0.2 (tunnel) 172.16.0.2 > 8.8.8.8

Member Since	‎10-12-2017 05:11 AM
Date Last Visited	‎03-28-2019 07:26 AM
Posts	5

User Statistics

User Activity

ASA 5510 Hairpin/U-Turn Traffic to escape tunnel to public internet

Re: ASA 5510 Hairpin/U-Turn Traffic to escape tunnel to public internet

Re: You should active your

Re: ASA 5510 Hairpin/U-Turn Traffic to escape tunnel to public internet

Re: ASA 5510 Hairpin/U-Turn Traffic to escape tunnel to public internet