Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Deny UDP reverse path check block but other traffic permitted.

Hi,

Hope someone can help me. We are seeing the following on our logs on the ASA and don't understand why some traffic is blocked due to RPF but then other traffic is permitted:

 

1    Oct 10 2014    11:01:19    106021    192.168.0.223        10.10.10.54        Deny UDP reverse path check from 192.168.0.223 to 10.10.10.54 on interface INSIDE

1    Oct 10 2014    11:00:19    106021    192.168.0.223        10.10.10.54        Deny UDP reverse path check from 192.168.0.223 to 10.10.10.54 on interface INSIDE

6    Oct 10 2014    11:00:12    302021    192.168.0.223    63510    10.10.10.54    0    Teardown ICMP connection for faddr 192.168.0.223/63510 gaddr 10.10.10.54/0 laddr 10.10.10.54/0

6    Oct 10 2014    11:00:03    302020    192.168.0.223    63510    10.10.10.54    0    Built inbound ICMP connection for faddr 192.168.0.223/63510 gaddr 10.10.10.54/0 laddr 10.10.10.54/0

1    Oct 10 2014    10:59:19    106021    192.168.0.223        10.10.10.54        Deny UDP reverse path check from 192.168.0.223 to 10.10.10.54 on interface INSIDE

1    Oct 10 2014    10:59:19    106021    192.168.0.223        10.10.10.54        Deny UDP reverse path check from 192.168.0.223 to 10.10.10.54 on interface INSIDE

 

Routes all exist in the right places or the permitted flows would fail.

Any help would be greatly appreciated.

 

Cheers,

 

Matt

Everyone's tags (1)
2 REPLIES
Cisco Employee

Hi,Can you share the

Hi,

Can you share the configuration ?

Thanks and Regards,

Vibhor Amrodia

New Member

Hi Vibhor,Unfortunately I am

Hi Vibhor,

Unfortunately I am unable to share the config from the devices due to their nature. If you could point me in a direction to investigate that would be appreciated.

Thanks and sorry,

Matt

188
Views
0
Helpful
2
Replies
CreatePlease login to create content