Hello, 

Another interesting question is in regards of virtual HTTP on the ASA, if you 
are connected directly to the same broadcast domain as the virtual IP it does 
not work.

If I try to do virtual http I get: 

%ASA-2-106001: Inbound TCP connection denied from 192.10.1.200/4475 to 
192.10.1.100/80 flags SYN  on interface <unknown-ifc>
%ASA-2-106001: Inbound TCP connection denied from 192.10.1.200/4476 to 
192.10.1.100/80 flags SYN  on interface <unknown-ifc>


If I use an external IP address as virtual HTTP, of course it works cuz the 
packet is process as it was going outbound, authentication is picked up and it 
works fine. 

Any thoughts? 

Mike 
                                          
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to