Problem with asymmetry

[Luciano_Cirino]

Good morning everyone,

We are facing an issue with a specific access. When trying to access it, the packet that should exit through the eth8.7 interface, one of the providers we have, is going out through another interface that is not configured.

Problem with asymmetry? Has anyone experienced this before?

Below is an image with the packet capture details.

[Chris_Atkinson]

More details are likely required about your configuration, things like NAT and ISP redundancy config?

What does your routing table show as the correct egress path for the destination?

[the_rock]

Make sure topology is correct and routes are also indeed right. Run ip r g command, ie ip r g 8.8.8.8

Andy

[the_rock]

Also, Im little confused by your statement "...is going out through another interface that is not configured"

How is that even possible?

Andy

[Luciano_Cirino]

I'm sorry for the lack of details in the previous explanation.

The packet enters through the interface eth8.7 (link A), goes through the inspection and NAT flow correctly, and then it is returned through eth8.8 (link B).

[the_rock]

Question...is this brand new issue or just started recently? Any changes made?

Andy

[Chris_Atkinson]

Can you please show the routing table output for this destination also is there any PBR configured that would match this traffic?

[G_W_Albrecht]

I would involve CP TAC asap to get this fixed...

[Luciano_Cirino]

We would like to inform you that we are already in contact with the TAC. Thank you.

[the_rock]

What was done with TAC so far?

Andy

[the_rock]

If you could send us below from expert mode, would help, for sure.

route

netstat -nr

clish -c "show route all"

Andy