cisco asa + action drop issue
        Posted  
        
            by 
                ghp
            
        on Server Fault
        
        See other posts from Server Fault
        
            or by ghp
        
        
        
        Published on 2012-06-27T16:02:00Z
        Indexed on 
            2012/06/27
            21:19 UTC
        
        
        Read the original article
        Hit count: 248
        
Have created a tunnel between 10.x.y.z network and 122.a.b.c ..the tunnel is up and active, but when I try the packet tracer output ..I get the ACTION  as drop. I have also enabled same-security-traffic permit intra-interface. Can someone help me what does this drop mean?
Result:
input-interface: inside
input-status: up
input-line-status: up
output-interface: outside
output-status: up
output-line-status: up
Action: drop
Drop-reason: (acl-drop) Flow is denied by configured rule
Packet Tracer output
@Shane Madden: please find below the packet tracer output.
CASA5K-A#
CASA5K-A# config t
CASA5K-A(config)# packet-tracer input inside tcp 10.x.y.112 0 122.a.b.c 0
Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in   0.0.0.0         0.0.0.0         outside
Phase: 2
Type: ACCESS-LIST
Subtype:
Result: DROP
Config:
Implicit Rule
Additional Information:
Result:
input-interface: inside
input-status: up
input-line-status: up
output-interface: outside
output-status: up
output-line-status: up
Action: drop
Drop-reason: (acl-drop) Flow is denied by configured rule
CASA5K-A(config)#
========================================================================
The access-group are as follows :
access-group acl-inbound in interface outside access-group acl-outbound in interface inside and
the access-list's are
access-list acl-inbound extended permit tcp any any gt 1023 
access-list acl-outbound extended permit ip object-group net-Source object net-dest
© Server Fault or respective owner