Cisco ASA - Allow ARPs for Non-Directly-Connected IPs

cisco asa 
arp permit-nonconnected

Notes:

  • This is not recommended by Cisco due to security concerns
  • This was disabled by default in version 8.4(5). Prior to this, the firewall may ARP for non-directly-connected NAT IPs.

Documentation

Next Post Previous Post