Hi,
some additional information...
1.) I saw, that proxy arp is enabled on all the interfaces on this firewall.
I became aware of this, because I was wondering about an unusual behaviour from a client from the internal network 172.18.x.x. When I made a tracerroute or a pathping I didn´t see any hops, the packets are traveling.... It looks like, the destination is directly connected...
Could Proxy, enabled on the interfaces, cause problems in relation to this phenomenon?
2.) Then a second point, today I again issued a "sh cry ipsec sa peer 1.2.3.4 det"
With the det attached, I can see a littel more accurate output:
#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#TFC rcvd: 0, #TFC sent: 0
#Valid ICMP Errors rcvd: 0, #Invalid ICMP Errors rcvd: 0
#pkts no sa (send): 8, #pkts invalid sa (rcv): 0
What does this mean? #pkts no sa (send): 8
3.) When Im trying to telnet with a random port from a internal pc (located in customer network 172.18.x.x) to my pc´s remote dialing address in 10.20.20.x I see no connection at all in asdm....
I really don´t get it!
