I'm trying to work out this issue...
source, switchA = 192.168.0.4
FW1 = 192.168.0.1
FW1_Transit = 192.168.4.1
FW2_Transit = 192.168.4.7
FW1_VLAN = 192.168.12.0 /25
destination, SwitchB = 192.168.12.10
I setup a capture to watch the traffic and see it all the way onto the destination VLAN (192.168.12.0/25).
However, I dont see the traffic coming back on this VLAN Interface.
I setup a policy NAT as follows:
access-list PNAT-3612 extended permit ip any 192.168.12.0 255.255.255.128
global (TD_3Tier_HQ_App_NLB) 1 interface
nat (TD_3Tier_Web_2_App) 1 access-list PNAT-3612 outside
which appears to cause the traffic to come back on that interface, BUT, I dont see it hit the ACL, and the log output shows the following error:
Received ARP response collision from 192.168.12.10/8843.e17f.9041 on interface TD_3Tier_HQ_App_NLB (this being the name of the vlan interface)
Is this implying a duplicate IP somewhere?
thanks in advance.