Cluster ip address not accessible from outside interface

Unanswered Question
Nov 18th, 2008

Hi ,

I have replaced my pix-515e with asa5520-k9(Version 8.0(3)6).

I am facing an issue where i am having two servers on inside which r clustered.

From my outside interface i can connetct to server1 and srver2 but not the cluster ip.

I have natted all the three ip addresses statically.

Ur help needed as i caanot connect to the cluster ip,my application is not working.

static (inside,outside) netmask -----cluster ip

static (inside,outside) netmask

static (inside,outside) netmask

I cant access the cluster ip address but access the physical ip address.



I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
panzhixin Tue, 08/11/2009 - 21:45

I have the same problem with you.

how should we do when the ssl vpn connection across the nat.for the cisco ssl vpn cluster uses a redirect technique, so it can't keep the session when the nat happen . So I think , in the nat environment, cisco ASA couldn't support cluster

robertson.michael Wed, 08/12/2009 - 07:14

Hi Mahesh,

In addition to the static lines you mentioned, you also need to verify that your access-lists are configured correctly as well.

If possible, please post a sanitized copy of your config and we might be better able to assist.



This Discussion