Cisco Cisco ASA for Nexus 1000V Series Switch Guía Para Resolver Problemas
Cisco recommends that you have knowledge of Cisco 5500 Series ASAs.
Components Used
The information in this document is based on Cisco ASA 5500 Series ASAs that run Software
Version 8.2.
Version 8.2.
The information in this document was created from the devices in a specific lab environment. All of
the devices used in this document started with a cleared (default) configuration. If your network is
live, make sure that you understand the potential impact of any command.
the devices used in this document started with a cleared (default) configuration. If your network is
live, make sure that you understand the potential impact of any command.
Background Information
The interface that receives the packet is called the ingress interface and the interface through
which the packet exits is called the egress interface. When you refer to the packet flow through
any device, the task is easily simplified if you look at it in terms of these two interfaces. Here is a
sample scenario:
which the packet exits is called the egress interface. When you refer to the packet flow through
any device, the task is easily simplified if you look at it in terms of these two interfaces. Here is a
sample scenario:
When an inside user (192.168.10.5) attempts to access a web server in the demilitarized zone
(DMZ) network (172.16.10.5), the packet flow looks like this:
(DMZ) network (172.16.10.5), the packet flow looks like this:
Source address - 192.168.10.5
●
Source port - 22966
●
Destination address - 172.16.10.5
●
Destination port - 8080
●
Ingress interface - Inside
●
Egress interface - DMZ
●
Protocol used - TCP (Transmission Control Protocol)
●
After you determine the details of the packet flow as described here, it is easy to isolate the issue
to this specific connection entry.
to this specific connection entry.
Cisco ASA Packet Process Algorithm