We have an ASA 5520 with various different DMZ's at different security levels. One of the interfaces, gi0/2, is configured with sub-interfaces connected via a trunk to a 3560 switch. I am trying to pass traffic from VLAN 4 to the inside network with limited success. For some reason traffic for VLAN 4 is getting blocked by the acl for VLAN 2. Is this a NAT issue?
acl_dmz2 shoukld have nothing to do with this? I have not edited acl_dmz2 to allow or permit any traffic associated VLAN 4 under subinterface gi0/2.3. All traffic on gi0/2.3 should be controled by acl_dmz4, not acl_dmz2. acl_dmz2 should only control traffic on gi0/2.1. I wouldn't think it would have anything to do with traffic on any other sub-interface.
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...