I'm trying to work out this issue...

source, switchA =        192.168.0.4

FW1     =                    192.168.0.1

FW1_Transit =             192.168.4.1

FW2_Transit =             192.168.4.7

FW1_VLAN =              192.168.12.0 /25

destination, SwitchB = 192.168.12.10

I setup a capture to watch the traffic and see it all the way onto the destination VLAN (192.168.12.0/25).

However, I dont see the traffic coming back  on this VLAN Interface.

I setup a policy NAT as follows:

access-list PNAT-3612 extended permit ip any 192.168.12.0 255.255.255.128
global (TD_3Tier_HQ_App_NLB) 1 interface
nat (TD_3Tier_Web_2_App) 1 access-list PNAT-3612 outside

which appears to cause the traffic to come back on that interface, BUT, I dont see it hit the ACL, and the log output shows the following error:

Received ARP response collision from 192.168.12.10/8843.e17f.9041 on interface TD_3Tier_HQ_App_NLB (this being the name of the vlan interface)

Is this implying a duplicate IP somewhere?

thanks in advance.

Bruce