From: Rik Guyler (rguyler@gmail.com)
Date: Wed Jan 09 2008 - 01:28:56 ARST
Sounds like an HSRP problem on the router more than an issue on the ASA.
Did you check CCO for a bug in your IOS version on the router?
I see Lukas suggests using the BIA and that could be a possible
workaround. I use a similar setup on my BGP routers and ASAs and the
HSRP solution works fine.
Rik
On Tue, 2008-01-08 at 03:12 -0800, Peter Svidler wrote:
> folks
>
> in real life scenario , I have an ASA connected to Two Routers for internet access , the routers are running HSRP between them ,the ASA has default route to the HSRP VIP address and the setup worked fine for some time
>
> for some reason , a problem happened on the ASA that users from inside the network cannot access the internet , when i do ping from inside to outside i got the following log message on the ASA
>
>
>
> %ASA-3-305005: No translation group found for icmp src outside:x.x.x.x dst inside:y.y.y.y (type 8, code 0)
> the X.X.X.X refers to the primary router physical IP address ( not the Virtual HSRP ip )
>
>
> the problem is obviously that the ASA expects to see the VIP however it gets reply from the physical IP
>
> I had to turn off the HSRP for while and things are fine now but I wonder if anyone seen such problem before , is there any thing to be done to force the router to always use the VIP
>
> thanks in advance
>
>
>
>
>
>
> ---------------------------------
> Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Feb 01 2008 - 10:37:58 ARST