Kings, Packet Tracer is buggy in multiple context mode (some certain scenarios). Maybe they fixed it in > 8.2, but not 100% of that.
Regards, -- Piotr Kaluzny CCIE #25665 (Security), CCSP, CCNP Sr. Support Engineer - IPexpert, Inc. URL: http://www.IPexpert.com On Wed, Jul 4, 2012 at 3:49 PM, Fawad Khan <fawa...@gmail.com> wrote: > How does the Nat control and statics look like? > > On Wednesday, July 4, 2012, Kingsley Charles wrote: > >> Typo, the dest port is 23... >> >> On Wed, Jul 4, 2012 at 5:45 PM, Kingsley Charles < >> kingsley.char...@gmail.com> wrote: >> >>> Hi all >>> >>> When I run packet tracer from out to in, I get the following O/P. Now >>> the outside interface is shared between contexts but I have configured for >>> mac address-auto. Traffic is passing without any issues. >>> >>> Thoughts please. >>> >>> asa1/admin(config)# packet-tracer input outside tcp 20.10.30.40 1024 >>> 10.20.30.40 23 >>> >>> Result: >>> input-interface: outside >>> input-status: up >>> input-line-status: up >>> Action: drop >>> Drop-reason: (ifc-classify) Virtual firewall classification failed >>> >>> >>> With regards >>> Kings >>> >> >> > > -- > FNK > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com