allow traffic between 2 interfaces on ASA with the same security level

[brianbono]

Hello,

I need help in allowing traffic between 2 interfaces on ASA with the same security level. I know that if i configure the 0/2 with the same subnet as the 0/1 this will post an error.

Now, what is the better way of doing this if I want these two interfaces to see each other since they are on the same vlan.

thanks

[husycisco]

Hi Brian

same-security-traffic permit inter-interface

above command is what you need. You also have to define exempt nat definitons and acls. Please have a look at following link to have an idea.

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Firewalling&topicID=.ee6e1fa&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cc0adec

Regards