Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA and hairpinning(redirecting of ip traffic)

Does anyone have a solid, proven way of doing this?

I have an ASA-8.03 version with an inside interface 172.16.0.1/24 and have another network via 172.16.0.2(router) to the network 192.168.10.0/24.

I setup the "permit intra-interface traffic" command and added a static route "route inside 192.168.10.0 255.255.255.0 172.16.0.2 1"

and also setup a nat (inside) 0 access-list nonat

In the nonat acl i have permit ip 172.16.0.0 255.255.255.0 192.168.10.0 255.255.255.0

Doing all this allows icmp packets to and from the given networks. But not an tcp traffic! What am I missing. Any Idea's. I have tried using different static nat statements as well with no luck. If you have ip redirects working an an ASA please let me know what you have done to accomplish this.

Thanks In Advance,

Pat B

2 REPLIES
Green

Re: ASA and hairpinning(redirecting of ip traffic)

Give this a try instead of nat 0.

global (inside) 1 interface

nat (inside) 1 172.16.0.0 255.255.255.0

May not be exactly what you want, but it should work.

Gold

Re: ASA and hairpinning(redirecting of ip traffic)

nonat acl that permits 192.168.10.0/24 172.16.0.0/24 ?

can you post the config?

do you have an acl applied to your inside interface?

210
Views
0
Helpful
2
Replies