I have a Cisco 5505 in our office, and everything is on the network. We have a cheap wireless router that we would like to use. The router is sitting behind the inside interface, and is configured to have behind it, and has the ip address for the interface facing our firewall. I have added a static route as so:

route inside 1

I have also added this access rule:

access-list inside_access_in extended permit tcp any

However, when I try to, say, remote desktop to a machine behind this router, I get this message in the logs:

Inbound TCP connection denied from to flags SYN on interface inside

I'm not terribly experienced with this, so any help would be gratefully appreciated.


It turns out I needed the following command:

same-security-traffic permit intra-interface

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.