In all my test I was plugged on SW02 on a port on VLAN 1.Manufacturer: Cisco Systems, Inc Manufacturer Part Number: ASA5505-50BUNK8-RF Manufacturer Website Address: Brand Name: Cisco Product Series: 5500 Product Model: ASA 5505 Product Name: ASA 5505 Adaptive Security Appliance Marketing Information: The Cisco ASA 5505 Adaptive Security Appliance is a next-generation, full-featured security appliance for small business, branch office, and enterprise teleworker environments that delivers high-performance firewall, SSL and IPsec VPN, and rich networking services in a modular, "plug-and-play" appliance. On SW02 I can see mac address of Cisco ASA and mac address of HSRP IP on Eth10 but I can't see ARP for HSRP IP 192.168.254.1 On Cisco ASA I have disable proxy ARP on inside interface and in this situation I can see ARP entry for HSRP 192.168.254.1 and mac address of HSRP IP is present on Eth1 of Cisco ASA and it's correct. It seems that HSRP does not route packets, but if I try to ping Cisco ASA (192.168.254.254) from SW01 the first ping is not successful but then it populates the ARP on SW01 and everything returns to work perfectly. A ll ping requests to 8.8.8.8 sent to the default gateway (192.168.254.1) do not reach the Cisco ASA. In this situation I can ping all devices because I'm in same network, in Eth1 on SW01 I can see mac address of Cisco ASA and I can ping Cisco ASA from any devices but on SW01 does not appear ARP for Cisco ASA. SW01 has a higher priority in the HSRP and returns to Active on HSRP correctly, the spanning tree correctly blocks the Eth1 port on SW02 because SW01 is root for MST instance. If I reload SW01 spanning tree and HSRP work correctly and all work, but when SW01 comes back I can't go to the internet. The connections between the devices are as follows: On SW01 and SW02 I have a MST instance with all VLAN 1-4094. I have two switches Cisco C3560 (Model: WS-C3560-8PC, Software version: 12.2(35)SE5, Software Image: C3560-IPBASE-M) and one Cisco ASA 5505.Īll three devices are in vlan 1 with these ip configuration:
0 kommentar(er)
