ASA Asymmetric NAT

We had a normal AnyConnect VPN configured and everyone could get to the inside resources. We then put an application in the DMZ and some vendors needed access to it. When we tried to hit one of the servers we got the following error.

%ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows; Connection for tcp src outside:10.200.80.143/55759 dst DMZ:10.8.1.101/3389 denied due to NAT reverse path failure

Looking up the logging error on Cisco provided a little bit of info and scouring the net did too, but no clear definitive “fix”. Thinking about what it was doing and reviewing the NAT rules I was pretty sure I  knew what was happening. Traffic was getting NAT’d out of the DMZ. We certainly didn’t want that. I create a NAT0 entry (I’m running 8.2.5 on this particular firewall) and that fixed it.

VPN assigned addresses: 10.200.80.0 /24
DMZ address space: 10.8.1.0 /24

Commands to resolve:

ASA-VPN-FW(config)# access-list DMZ_ACCESS_FROM_VPN permit ip 10.8.1.0 255.255.255.0 10.200.80.0 255.255.255.255
ASA-VPN-FW(config)#  nat (DMZ) 0 access-list DMZ_ACCESS_FROM_VPN

263 Comments on “ASA Asymmetric NAT”

  1. Pingback: bunny vibe
  2. Pingback: FOREX SIGNALS
  3. Pingback: Trend Mystery
  4. Pingback: mint tutorial
  5. Pingback: wand massager
  6. Pingback: nuc5cpyh treiber
  7. Pingback: penis pump
  8. Pingback: silicone vibrator
  9. Pingback: first time anal
  10. Pingback: dildos for women
  11. Pingback: פורום סקס
  12. Pingback: sabung ayam online
  13. Pingback: bmw vin decoder
  14. Pingback: best strap on
  15. Pingback: vibrating panties
  16. Pingback: jelly dildo
  17. Pingback: movie ratings
  18. Pingback: 918kiss
  19. Pingback: sarkari rojgar
  20. Pingback: http://2sex.club
  21. Pingback: http://sexlive.ltd
  22. Pingback: Baby
  23. Pingback: sexycam
  24. Pingback: Sexy live chat
  25. Pingback: Funny shirts
  26. Pingback: Gossip
  27. Pingback: 918kiss
  28. Pingback: Taste remix
  29. Pingback: sexy Latina dance
  30. Pingback: Hot Latina dance
  31. Pingback: slowdive dagger
  32. Pingback: Pandora Bracelets
  33. Pingback: sexy female cams
  34. Pingback: Hot ladies
  35. Pingback: Tellybuzz
  36. Pingback: Free adult sex
  37. Pingback: Free sexy cams
  38. Pingback: Funny Instagram
  39. Pingback: Free adult
  40. Pingback: Free chat
  41. Pingback: двуполье
  42. Pingback: Yeah yeah
  43. Pingback: hot girls live
  44. Pingback: Rap videos
  45. Pingback: beeg
  46. Pingback: sexy girls stream
  47. Pingback: sexy cams live
  48. Pingback: sexy stream
  49. Pingback: buy backlinks
  50. Pingback: Music videos
  51. Pingback: rap hip hop
  52. Pingback: Funny song
  53. Pingback: Hip hop videos
  54. Pingback: juicy chat
  55. Pingback: space_miamii chat
  56. Pingback: Hot rap mixtape
  57. Pingback: rf32fmqdbxwaa
  58. Pingback: deck tiling Nelson
  59. Pingback: girl chat
  60. Pingback: fun chat
  61. Pingback: Funny free chat
  62. Pingback: Mobile erotic chat
  63. Pingback: click this site
  64. Pingback: wand massager
  65. Pingback: clear dildo
  66. Pingback: free porn
  67. Pingback: psicologo avezzano
  68. Pingback: sexy gaming Chat
  69. Pingback: sexy Latina duo
  70. Pingback: sweet Sofia cam
  71. Pingback: sexy Melody webcam
  72. Pingback: Tory Burch
  73. Pingback: gucci handbags
  74. Pingback: Hot webcam
  75. Pingback: Sexy chat
  76. Pingback: funny hip hop
  77. Pingback: Comedy rap
  78. Pingback: hot hunk sexy
  79. Pingback: www.awaporn.mobi
  80. Pingback: waterproof dildo
  81. Pingback: luxury sex toy
  82. Pingback: glass anal dildo
  83. Pingback: anal dildo
  84. Pingback: services
  85. Pingback: کوس
  86. Pingback: Guitar
  87. Pingback: тетерь
  88. Pingback: sexy chat
  89. Pingback: Free cams
  90. Pingback: desilady
  91. Pingback: nipple pump
  92. Pingback: 안전놀이터
  93. Pingback: prostate massage
  94. Pingback: 토토사이트
  95. Pingback: 해외카지노
  96. Pingback: 먹튀검증
  97. Pingback: 안전공원
  98. Pingback: 토토사이트
  99. Pingback: #TheConsultants
  100. Pingback: #MusicVideo
  101. Pingback: #TheConsultants
  102. Pingback: Fenstermontage
  103. Pingback: 사설토토
  104. Pingback: 네임드사다리
  105. Pingback: iosgg.com
  106. Pingback: 안전공원
  107. Pingback: 먹튀검증
  108. Pingback: dementia care
  109. Pingback: ineluttabile testo
  110. Pingback: penis extender
  111. Pingback: vps server
  112. Pingback: dildo vibe
  113. Pingback: anal play
  114. Pingback: prostate
  115. Pingback: glass dildo
  116. Pingback: candy heart plug
  117. Pingback: büsum strand
  118. Pingback: LolyCam 18+
  119. Pingback: bangla sex
  120. Pingback: 天然石
  121. Pingback: sex bondage toy
  122. Pingback: pleasure whip
  123. Pingback: bondage sex kit
  124. Pingback: monster vibrator
  125. Pingback: stafilokokk gorla
  126. Pingback: insta mp3
  127. Pingback: 안전놀이터
  128. Pingback: silicone vibrators
  129. Pingback: vibrator for her
  130. Pingback: beast tv apk
  131. Pingback: best buy near me
  132. Pingback: dual penetration
  133. Pingback: порно чат
  134. Pingback: xml
  135. Pingback: 사설토토
  136. Pingback: xnnx
  137. Pingback: male masturbator
  138. Pingback: breakout of rut
  139. Pingback: Best penis pumps
  140. Pingback: G spot vibrator
  141. Pingback: Derivades Examen
  142. Pingback: bondage sex kit
  143. Pingback: raiders
  144. Pingback: kegel massager
  145. Pingback: g spot vibrator
  146. Pingback: FIFA 19 Coins
  147. Pingback: Detroit SEO
  148. Pingback: Chicago SEO
  149. Pingback: detox tea

Leave a Reply