Hello.
My goal is to allow the router directly connected to the outside interface of the ASA5525 to send status messaged to an internal server. I've configured the outside ACL, and also routing. When I do a packet-tracer I receive a DROP at final step (has to do with NAT).
If the solution is to config an identity NAT, I worry that ALL traffic routing through this next hop will be identity-natted (though this may be an incorrect understanding.) See below...
Phase: 16
Type: NAT
Subtype: rpf-check
Result: DROP
Config:
nat (inside,outside) source dynamic any interface
---
May you please tell me how to fix this?
Thank you.
