Asa5512x not listening on public subnet

Question

Hello
I have a ASA5512x that I am trying to configure.  The problem I am having is the device is not processing packets destined for IP addresses on the same subnet as the public interface.  Packet tracer shows positive results when generating the packet itself.  Below is pertinent running config:
interface GigabitEthernet0/0
 nameif inside
 security-level 100
 ip address 10.XXX.XXX.1 255.255.255.0
interface GigabitEthernet0/1
 nameif outside01
 security-level 0
 ip address 209.XXX.XXX.50 255.255.255.240
access-list global_access extended permit ip any any
object network EMV_ATT
 nat (inside,outside01) static 209.XXX.XXX.56 service tcp https https
object network HTTPS_Exchange
 nat (inside,outside01) static 209.XXX.XXX.55 service tcp https https
object network HTTPS_KNS
 nat (inside,outside01) static 209.XXX.XXX.54 service tcp https https
object network HTTP_KNS
 nat (inside,outside01) static 209.XXX.XXX.54 service tcp www www
object network IMAP_Exchange
 nat (inside,outside01) static 209.XXX.XXX.55 service tcp 993 993
object network RELAY_Boeing
 nat (inside,outside01) static 209.XXX.XXX.51 service udp 5040 5040
object network RELAY_Test
 nat (inside,outside01) static 209.XXX.XXX.51 service udp 14785 14785
object network RELAY_r5c
 nat (inside,outside01) static 209.XXX.XXX.54 service udp 14785 14785
object network SMTP_Exchange
 nat (inside,outside01) static 209.XXX.XXX.55 service tcp smtp smtp
object network SSL_ATT
 nat (inside,outside01) static 209.XXX.XXX.56 service tcp https https
object network SSL_Boeing
 nat (inside,outside01) static 209.XXX.XXX.51 service tcp https https
object network Aurora_Relay
 nat (inside,outside01) static 209.XXX.XXX.57 service udp 5040 5040
object network Aurora_TC
 nat (inside,outside01) static 209.XXX.XXX.57 service tcp https https
object network Aurora_TMS_HTTPS
 nat (inside,outside01) static 209.XXX.XXX.57 service tcp https 7654
object network Aurora_XMPP_5222
 nat (inside,outside01) static 209.XXX.XXX.57 service tcp 5222 5222
object network Aurora_XMPP_5223
 nat (inside,outside01) static 209.XXX.XXX.57 service tcp 5223 5223
nat (inside,outside01) after-auto source dynamic any interface
access-group inside_access_in in interface inside
access-group outside_access_in in interface outside01
access-group global_access global
route outside01 0.0.0.0 0.0.0.0 209.XXX.XXX.49 1

Answer 1

Hi,
It is documented in Oracle Clusterware and Real Applicaiton Cluster Installation Guide as given below-
One public IP address for each node, to be used as the Virtual IP address for client connections and for connection failover.
During installation this public virtual IP address (VIP) is associated with the same
interface name on every node that is part of your cluster. The IP addresses that you use for all of the nodes that are part of a cluster must be from the same subnet. If you have a domain name server (DNS), then register the host names for the VIP with the DNS. The VIP should not be in use at the time of the installation, because this is a VIP that Oracle Clusterware manages.
Thanks & Regards