asked on

Cisco ASA - Network Routing Issue

Hi,

I am having some issues on my network here, and I have never quite seen anything like it.

I have come over to do some work in the Branch Office and I have installed an Exchange 2007 Server onto the LAN.

But, it itermitently becomes unavailable, ie outlook disconnects, you cannot ping etc.

But the problem cannot be the hardware as this server is also running vmware and the server running with vmware can be pinged and connected to even when the host server cannot.

When it is not available etc I get the below in the ASDM Log:

Inbound TCP connection denied from 192.168.200.68/1628 to companyx-exch01/3389 flags SYN on interface inside

Does anyone know why I am seeing this?

192.168.200.68 is my client PC and the server companyx-exch01 has an ip address of 192.168.200.13.

Thanks in advance.

Paul

Voltz-dk

Normally when traffic is blocked it will say it is blocked by an access-list, here it claims the traffic was destined for the inside interface itself.
Could you display some parts of the config? Like interface, nat & statics?

essexboy80

ASKER

Hi,

I had both of these in my config :

static (inside,outside) tcp interface smtp companyx-exch01 smtp netmask 255.255.255.255
static (outside,inside) tcp companyx-exch01 smtp 111.111.111.111(interface ip) smtp netmask 255.255.255.255

I had a play around with some config and removed the following and I think it has fixed it, would this make sense?

Removed :

static (outside,inside) tcp companyx-exch01 smtp 111.111.111.111(interface ip) smtp netmask 255.255.255.255

Seems better now, does that make sense?

Thanks

Voltz-dk

Yes that makes perfect sense. It was stuff like that I was looking for when I asked you to post these config bits :)

essexboy80

ASKER

so what was what i removed actually doing to cause issue?

ASKER CERTIFIED SOLUTION

Voltz-dk

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial