Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Same Interface Routing

Is there an option to turn on same interface routing?

For example, web server A and B are on a subnet behind an ASA using private addressing. Web Server A resolve B's domain name to it's public address ( I realize a host file could be used here, but given the number of servers, I'd rather not). However, since the ASA doesn't support same interface routing, the traffic from A never gets to B.

I thought I recall seeing somewhere that there was a command to enable this, but perhaps I'm confusing it with the same-security routing command.

2 REPLIES
Community Member

Re: Same Interface Routing

Found it:

same-security-traffic

To permit communication between interfaces with equal security levels, or to allow traffic to enter and exit the same interface, use the same-security-traffic command in global configuration mode. To disable the same-security traffic, use the no form of this command.

same-security-traffic permit {inter-interface | intra-interface}

no same-security-traffic permit {inter-interface | intra-interface}

Syntax Description

inter-interface

Permits communication between different interfaces that have the same security level.

intra-interface

Permits communication in and out of the same interface.

Defaults

This command is disabled by default.

Command Modes

The following table shows the modes in which you can enter the command:

Command Mode Firewall Mode Security Context

Routed Transparent Single Multiple

Context System

Global configuration

•

•

•

•

-

Command History

Release Modification

7.0(1)

This command was introduced.

7.2(1)

The intra-interface keyword now allows all traffic to enter and exit the same interface, and not just IPSec traffic

Community Member

Re: Same Interface Routing

Hi,

Is this what you are talking about? You can try this one too.

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml

Regards,

John

297
Views
0
Helpful
2
Replies
CreatePlease to create content