2010/4/8 Vichao Saenghiranwathana <vichaos@xxxxxxxxx>: > I still stunned. Can you explain more in deeper detail so I can > understand what the problem is. > Hi Vichao, If you already have a static NAT translation at the ASA between these two addresses: 192.168.9.251 and 203.130.133.9, it doesn't make sense to me why you also configured the same public IP address at the second subinterface. Unless you need it for an unrelated setup, you may want to remove the second subinterface because (if you also configured a default-gateway there) when external packets are destinede to the address 203.130.133.9 it might cause the ASA to NAT packets that shouldn't be, or viceversa. Aside from that, if the issue persist your next clue resides in collecting all the info your ASA shows about the WCCP association/registration, and monitor the counters of the GRE tunnel and iptables active rules and default policies. I hope this comment was helpful. I have a similar setup and it works fine. Regards, Horacio.
