Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

Urgent help required(Problem after replacing PIX with ASA)

4 REPLIES

Re: Urgent help required(Problem after replacing PIX with ASA)

What is the problem? :)

Anonymous
N/A

Re: Urgent help required(Problem after replacing PIX with ASA)

Hi ,

I have replaced my pix-515e with asa5520-k9(Version 8.0(3)6).

I am facing an issue where i am having two servers on inside which r clustered.

From my outside interface i can connetct to server1 and srver2 but not the cluster ip.

I have natted all the three ip addresses statically.

Ur help needed as i caanot connect to the cluster ip,my application is not working.

static (inside,outside) 10.30.147.155 172.16.25.200 netmask 255.255.255.255 -----cluster ip

static (inside,outside) 10.30.147.153 172.16.25.100 netmask 255.255.255.255

static (inside,outside) 10.30.147.154 172.16.25.101 netmask 255.255.255.255

I cant access the cluster ip address but access the physical ip address.

Regads

Mahesh

Re: Urgent help required(Problem after replacing PIX with ASA)

If you mirrored the configuration, then I doubt this has anything to do with the ASA. Have you allowed all three IPs in the ACL as well?

Anyway, can you run the following command on the server and post the output here?

packet-tracer input outside tcp 4.4.4.4 1025 10.30.147.15 80 detailed

Just make sure you replace 80 with the 'service' port running on your app.

Regards

Farrukh

Anonymous
N/A

Re: Urgent help required(Problem after replacing PIX with ASA)

Thanks farrukh for ur reply,

I am getting hit counts for the respective acl.

When i replace my asa with pix then my config works fine.

I will definitely move ahead with the packet tracing alternative and revert back with the outcome.

Regards

Mahesh

128
Views
0
Helpful
4
Replies
CreatePlease to create content