Asymmetric Routing issue

[ravindra Krishna]

Hello All,

We are currently facing an asymmetric routing issue. Please find the attached network diagram. The firewall in the network is dropping the final ack packet as it has never received syn/ack packet. Is there any solution to these kind of network diagram except chaning the gateway of the default vlan l3.

Your inputs will be highly appreciated.

Thanks in advance.

Ravi

[Richard Burts]

I do not see any solution to this other than changing the default gateway from fw to L3.

HTH

Rick

[milan.kulik]

Hi,

enabling ICMP redirect sending by the FW would fix it.

But I'm not sure if your FW provides this feature?

Best regards,

Milan

[Bharat Negi]

I think the resolution of your problem seems to be in avoiding inter VLAN routing.  You can apply a PBR on Server VLAN and forward traffic sourced from server to default VLAN machine towards FW.