Skip to main content
edited tags
Link
user36472
user36472
Source Link

Issue with Connectivity Over Next Hop Gateway (ASA) to Point to Point

I'm having an issue routing traffic from a backup gateway on a different ISP, to our main gateway, which uses a point to point connection to a data center, with the majority of our infrastructure. All devices being used are Cisco ASAs. Site A is one subnet 10.10.108.0/22 and Site B is also a single subnet 10.20.10.0/24. Clients using ASA1 as their default gateway have no issues connecting to Site B. Any client that I put on ASA2 for a default gateway can ping back and forth to Site B clients, but there is no data access. Looking at my nicely drawn picture, PC2 and PC3 can ping each other. However, that is it. I have set an ACL on ASA2 to permit traffic to Site B. ASA2 also has a static route to send all Site B traffic to ASA1, therefore to go through the P2P. I've tried entering a NAT rule on ASA2 as follows, and this may be where I'm messing up.

nat (inside,inside) source static SiteB-lan SiteB-lan destination static SiteA-lan SiteA-lan no-proxy-arp route-lookup

Site B knows to send all Site A traffic back through the P2P that connects to ASA1. ASA1 sends traffic to and from the P2P without any issue, unless its the traffic coming from ASA2, which is the same subnet as all of the other inside traffic that it passes. Weird thing is, if you check out the photo, PC2 and PC3 can ping each other, no problem, but can't pass any data. Not sure what I'm missing here. Appreciate any feedback.

Network