Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Hairpinning issue with ASA 7.2(2)...


I'm trying to allow access from a remote office to a central office:

They're both connected to the inside interface.

I'm trying to get to a Print Server on from I thought it was a case of just enabling hairpinning. At the moment local users

can get out through the ASA but nothing remote can get back in. In the logs it's failing on 'nat (inside) 1'.

A little bit stumped at the minute... there's not much more configuration on the box than that below.

Some config:

same-security-traffic permit intra-interface

access-list inside-acl extended permit ip any any

access-list inside-acl extended permit icmp any any

global (inside) 1 interface

global (outside) 1 interface

nat (inside) 1

static (inside,inside) netmask

static (inside,inside) netmask

access-group inside-acl in interface inside

access-group inside-acl in interface outside

route inside 1

route inside 1


Re: Hairpinning issue with ASA 7.2(2)...

You should not need those statics since you have

global (inside) 1 interface

nat (inside) 1 0 0

Give it a try without them.

New Member

Re: Hairpinning issue with ASA 7.2(2)...

Something may have changed with the ASA, but I remeber hearing that the PIX could not route traffic back out the same interface it came in.