topic Re: ASA isn't Routing Traffic in Network Security

ASA isn't Routing Traffic

tsetsetsetsetsetset — Sat, 22 Feb 2020 07:34:50 GMT

I've spun up an ASA in packet-tracer and I've set up some device as shown below:

PC A - 192.168.1.2

ASA - 192.168.1.1 / 172.16.1.1

PC B - 172.16.1.2

Both PCs are able to ping the ASA but can't get to each other. I've set an all ICMP ACL so I would think I'm good to go. I'll post the ASA config below:

: Saved
:
ASA Version 8.4(2)
!
hostname ciscoasa
names
!
interface Ethernet0/0
!
interface Ethernet0/1
 switchport access vlan 2
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
interface Vlan1
 nameif inside
 security-level 100
 ip address 192.168.1.1 255.255.255.0
!
interface Vlan2
 nameif outside
 security-level 50
 ip address 172.16.1.1 255.255.255.0
!
!
!
access-list all extended permit tcp any any
access-list all extended permit icmp any any
!
!
access-group all in interface inside
access-group all in interface outside
access-group all out interface inside
access-group all out interface outside
!
!
!
group-policy test internal
!
!
!
!
telnet timeout 5
ssh timeout 5
!
dhcpd auto_config outside
!
!
dhcpd address 192.168.1.5-192.168.1.36 inside
dhcpd enable inside

Can anyone see what the issue is?

Re: ASA isn't Routing Traffic

Flavio Miranda — Sun, 15 Oct 2017 22:26:47 GMT

Hello @tsetsetsetsetsetset

Please, share your Packet Tracer file. You can go to "File" tab and Save As PKZ.

After that save file in your machine, rename it as file.pkz.txt and attach here.

This is the easiest way to help you.

Waiting for you file.

-If I helped you somehow, please, rate it as useful.-

Re: ASA isn't Routing Traffic

Francesco Molino — Sun, 15 Oct 2017 22:41:42 GMT

Your config seems ok.

Can you share the output of the following command:

packet-tracer input inside icmp 192.168.1.2 8 0 172.16.1.2

Re: ASA isn't Routing Traffic

tsetsetsetsetsetset — Sun, 15 Oct 2017 22:51:44 GMT

I tried this initially. Doesn't seem Packet Tracer lets you use the packet-tracer command, unless I'm doing something wrong.

Re: ASA isn't Routing Traffic

Francesco Molino — Sun, 15 Oct 2017 22:53:35 GMT

if you copy/paste the command I sent it has to work.
Can you have a try and let us know?

Re: ASA isn't Routing Traffic

Flavio Miranda — Sun, 15 Oct 2017 23:00:09 GMT

Packet Tracert ASA has not the same command as real ASA.

Send me you pkz file as I said and let me take a look.

-If I helped you somehow, please, rate it as useful.-

Re: ASA isn't Routing Traffic

Francesco Molino — Sun, 15 Oct 2017 23:03:11 GMT

Sorry I missed you were talking about Packet Tracer simulator tool. I get confused. Yeah, you're right this command won't work.
As Flavio said, share the pkt file to take a look at it.

Re: ASA isn't Routing Traffic

tsetsetsetsetsetset — Sun, 15 Oct 2017 23:05:32 GMT

Had to upload as a tar because there are file extension restrictions. Should be able to change the extension back to pkz and open.

Re: ASA isn't Routing Traffic

Francesco Molino — Sun, 15 Oct 2017 23:33:54 GMT

I'm sorry but I only have packet tracer 5.3 and your file can't be opened in my software version.
Can you share a link where I can download the same software version as yours to be able to help you out?

Re: ASA isn't Routing Traffic

tsetsetsetsetsetset — Sun, 15 Oct 2017 23:36:42 GMT

https://www.netacad.com/courses/packet-tracer-download/

Re: ASA isn't Routing Traffic

Francesco Molino — Sun, 15 Oct 2017 23:51:38 GMT

Which version you used? I have downloaded 7.1 and still not working

Re: ASA isn't Routing Traffic

Flavio Miranda — Sun, 15 Oct 2017 23:55:15 GMT

Hello @tsetsetsetsetsetset

Your problem is a Typo on the PC with IP address 192.168.1.2. You put 192.158.1.2.

Correct that and will be ok. I could ping from both side with no problem.

-If I helped you somehow, please, rate it as useful.-

Re: ASA isn't Routing Traffic

tsetsetsetsetsetset — Mon, 16 Oct 2017 00:07:56 GMT

That was it, typo on the gateway. Next time instead of assuming I did something wrong I'll take a another look...

Re: ASA isn't Routing Traffic

Flavio Miranda — Mon, 16 Oct 2017 00:11:39 GMT

That happens man. Keep up!!

-If I helped you somehow, please, rate it as useful.-