If the asa has an arp entry, and then sees a conflicting gratuitous arp reply with a different MAC for that same IP, we will replace the arp entry we have with the new entry. We will also log a syslog at level 4 stating that there was a collision. I would suggest you to check the asa syslogs and debugs to see if we see evidence of these collision syslogs.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...