cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
751
Views
0
Helpful
4
Replies

ASA redirection using (same-security-traffic permit intra)

laut
Level 1
Level 1

I've deployed the ASA fw for different purpose. One is for Internet access and the other for site-to-site VPN connection. All the internal user's default gw is pointing to the Internet one, and this one contain the specific static route back to the VPN one. The command "same-security-traffic permit intra" already in placed, but the ASA still can not redirect the traffic to the VPN one for remote site connection. Both ASA are running 7.2(2).

Please advice

Tony

4 Replies 4

oabduo983
Level 1
Level 1

Being very specific on your static route statements, for every VPN remote site, you will have to have two static route statments one to reach the peer's outside network (or IP), another is to reach the internal network of the peer's network...

Have you tried (for troubleshooting purpose) pointing your clients to your Site2Site Firewall and verified it works fine?

Plz Rate if this helps

Sure that the VPN one is working properly, because i've setup my laptop pointing to the VPN one for default gw and it can access all the remote sites.

Tony

Just follow what I said earlier about having two route inside statements on your internal firewall one going to the outside address for your peer and another going to the internal subnet of your peer... this should solve your issue...

My problem is the ASA firewall can not redirect the traffic to the VPN one. If i put a layer-3 switch or router, the problem is solved. I just want to know the command purpose of "same-security-traffic", even the command in place but the application can not redirect.

Tony

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: