plesae find the details.
The server private ip is 172.16.48.83 and natted with public ip address 122.168.191.82.
Please find the report.
Netlink-OS-ASA# packet-tracer input outside tcp 4.2.2.2 1025 122.168.191.82 33$
Phase: 1
Type: FLOW-LOOKUP
Subtype:
Result: ALLOW
Config:
Additional Information:
Found no matching flow, creating a new flow
Phase: 2
Type: UN-NAT
Subtype: static
Result: ALLOW
Config:
static (inside,outside) Timesheet_Outside_Public Timesheet_Inside_Local netmask 255.255.255.255
match ip inside host Timesheet_Inside_Local outside any
static translation to Timesheet_Outside_Public
translate_hits = 35877, untranslate_hits = 2503399
Additional Information:
NAT divert to egress interface inside
Untranslate Timesheet_Outside_Public/0 to Timesheet_Inside_Local/0 using netmask 255.255.255.255
Phase: 3
Type: ACCESS-LIST
Subtype: log
Result: ALLOW
Config:
access-group outside_access_in in interface outside
access-list outside_access_in extended permit ip any any
Additional Information:
Phase: 4
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:
Phase: 5
Type: VPN
Subtype: ipsec-tunnel-flow
Result: ALLOW
Config:
Additional Information:
Phase: 6
Type: ACCESS-LIST
Subtype: log
Result: ALLOW
Config:
access-group inside_access_out out interface inside
access-list inside_access_out extended permit ip any any
Additional Information:
Phase: 7
Type: NAT
Subtype: rpf-check
Result: ALLOW
Config:
static (inside,outside) Timesheet_Outside_Public Timesheet_Inside_Local netmask 255.255.255.255
match ip inside host Timesheet_Inside_Local outside any
static translation to Timesheet_Outside_Public
translate_hits = 35877, untranslate_hits = 2503421
Additional Information:
Phase: 8
Type: NAT
Subtype: host-limits
Result: ALLOW
Config:
static (inside,outside) Timesheet_Outside_Public Timesheet_Inside_Local netmask 255.255.255.255
match ip inside host Timesheet_Inside_Local outside any
static translation to Timesheet_Outside_Public
translate_hits = 35877, untranslate_hits = 2503430
Additional Information:
Phase: 9
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:
Phase: 10
Type: FLOW-CREATION
Subtype:
Result: ALLOW
Config:
Additional Information:
New flow created with id 277395699, packet dispatched to next module
Phase: 11
Type: ROUTE-LOOKUP
Subtype: output and adjacency
Result: ALLOW
Config:
Additional Information:
found next-hop VPN_AccesssL3 using egress ifc inside
adjacency Active
next-hop mac address 001a.a224.73c2 hits 2236
Result:
input-interface: outside
input-status: up
input-line-status: up
output-interface: inside
output-status: up
output-line-status: up
Action: allow
