Hi JouniForss,
I was facing the same problem and your suggestion below solved my problem and thank you very much.
JouniForss wrote:
Hi,
I think you need the following command atleast
same-security-traffic permit intra-interface
It allows the traffic leave the same interface its arrived
From Cisco material:
same-security-traffic intra-interface
command lets traffic enter and exit the same interface, which is normally not allowed. This feature might be useful for VPN traffic that enters an interface, but is then routed out the same interface. The VPN traffic might be unencrypted in this case, or it might be reencrypted for another VPN connection. For example, if you have a hub and spoke VPN network, where the ASA is the hub, and remote VPN networks are spokes, for one spoke to communicate with another spoke, traffic must go into the ASA and then out again to the other spoke.
Also on that note, why is your outside interface also at security-level 100?
You also seems to have some extra networks in the first NAT rule
nat (Outside,Outside) source static DM_INLINE_NETWORK_1 DM_INLINE_NETWORK_1 destination static NETWORK_OBJ_192.168.70.0_24 NETWORK_OBJ_192.168.70.0_24 no-proxy-arp route-lookup
The DM_INLINE_NETWORK_1 includes your local LAN network which isnt located outside. Not sure if it really matters if its there but just something that I noticed when looking at the configurations.
- Jouni
