I have a 5550 working in routed mode with 8.0(4) version. My configuration have one physical interface in tunnel mode with 4 subinterface, 3 of them are inside and the forth one is dmz interface. Another phisical interface is configured as Outside interface.
On the inside interfaces there are applied ACLs inbound to allow only permitted traffic and at the end of all ACL there are the implicit deny rule. As I excpected all and just all permitted traffic by acl are allowed to pass through inside interfaces to less secure interface as Outside, while all other traffic denied by implicit deny rule. Instead I am experiencing a strange behavior on the inside interfaces that i can't undestand, It seems as implicit deny rule not working and all traffic is permitted. To block traffic I needed to apply manually a deny any any rule to all inside interface's ACL.
Can pleas anyone help me to undestand this behaviour? Is it due a wrong configuration or just a bug?
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...