I think the intra-interface argument applies only to incoming VPN connections that need to send encrypted or unencrypted traffic back through the same interface.
inter-interface on the other hand is not specific to VPN connections. I don't think it is allowed to redirect traffic by having hosts pointing first to the ASA and having the ASA routing the traffic back to another gateway using the same interface... Pat On 7/17/07, Sven Juergensen (KielNET) <[EMAIL PROTECTED]> wrote: > Hi list, > > is it possible to set the ASA to > allow ICMP redirects? The > same-security-traffic permit intra-interface > including routes and policies doesn't > really help: traffic gets either denied > or the portmap translation creation failed. > > Is it possible to route/redirect through a > single interface at all? > > Thanks and best regards, > > sven03 > > -- > Mit freundlichen Gruessen > > i. A. Sven Juergensen > > Fachbereich > Informationstechnologie > > KielNET GmbH > Gesellschaft fuer Kommunikation > Preusserstr. 1-9, 24105 Kiel > > Telefon : 0431 / 2219-053 > Telefax : 0431 / 2219-005 > E-Mail : [EMAIL PROTECTED] > Internet: http://www.kielnet.de > > AS# 25295 > Key fingerprint: > 65B6 90FC 010A 39CE DCA5 336D 9C45 3B7A B02D E132 > > Geschaeftsfuehrer Eberhard Schmidt > HRB 4499 (Amtsgericht Kiel) > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
