topic Re: ASA 5505 issue in Network Security

ASA 5505 issue

jm.virtual01 — Fri, 21 Feb 2020 14:18:02 GMT

I have ASA 5505. In my network, i have created a new VLAN 10.43.25.x/24 and the user from this vlan can't go on internet. I can ping the firewall from this vlan. I have allow route in the firewall for this network.

My firewall is ASA 5505 and two interfaces are configured, inside and outside. Also configured switchport.

Configuration for inside and outside interface is,

interface Ethernet0/1
description Inside
switchport access vlan 2

!
interface Vlan2
description INSIDE
nameif inside
security-level 100
ip address 192.16.71.2 255.255.255.0

interface Ethernet0/0
description OUTSIDE
interface Vlan1
description OUTSIDE
nameif outside
security-level 0
ip address 90.85.135.122 255.255.255.248

All the other switch ports are in acces more for outside interface but not in use.

From previous network192.168.15.x (vlan 2), 192.168.16.x (vlan 4) i can go on internet but not from 10.43.25.x (vlan 101).

What should be the inssue ?

Re: ASA 5505 issue

Seb Rupik — Wed, 13 Sep 2017 14:13:44 GMT

Hi there,

You are most likely missing NAT configuration for your new VLAN.

What is the output of:

sh run nat

cheers,

Seb.

Re: ASA 5505 issue

Spooster IT Services — Wed, 13 Sep 2017 16:00:50 GMT

Hi jm.virtual01,

Can you please show me the complete configuration of the ASA?

Can you please run packet tracer on ASA as mentioned below and share the output?

packet-tracer input inside tcp 192.16.71.100 15151 8.8.8.8 80 detailed