ASA ISSUES

BoomBastic1234626283 — Fri, 01 Dec 2023 04:26:34 GMT

Hello Everyone,

So, I've been having issues with my ASA, with the host pinging, I'm only being able to get two replies or one reply back from its interface address. I can also ping the router, but I only get one reply back from the router or no response back. I don't know what could be going on.

So, here's the rundown. I have two PCs. Each one is connected to a separate interface on the ASA, which is G1/2 and G1/1. I also have a 1940 router connected to the G1/4 interface. Also, everything is on the same subnet.

Here's the configuration:

ciscoasa(config)#exit

ciscoasa#show run

: Saved

ASA Version 9.6(1)

hostname ciscoasa

names

interface GigabitEthernet1/1

nameif PC-2

security-level 100

ip address 10.210.200.5 255.255.255.0

interface GigabitEthernet1/2

nameif PC-1

security-level 100

ip address 10.210.200.4 255.255.255.0

interface GigabitEthernet1/3

no nameif

no security-level

no ip address

shutdown

interface GigabitEthernet1/4

nameif R-A

security-level 100

ip address 10.210.200.2 255.255.255.0

interface GigabitEthernet1/5

no nameif

no security-level

no ip address

shutdown

interface GigabitEthernet1/6

no nameif

no security-level

no ip address

shutdown

interface GigabitEthernet1/7

no nameif

no security-level

no ip address

shutdown

interface GigabitEthernet1/8

no nameif

no security-level

no ip address

shutdown

interface Management1/1

management-only

no nameif

no security-level

no ip address

shutdown

object network p1

subnet 10.210.200.0 255.255.255.0

nat (PC-1,R-A) dynamic interface

route R-A 0.0.0.0 0.0.0.0 10.210.200.1 1

access-list ip extended permit icmp any any

class-map inspection_default

match default-inspection-traffic

class-map inspection_def

policy-map type inspect dns preset_dns_map

parameters

message-length maximum 512

policy-map global_policy

class inspection_default

inspect dns preset_dns_map

inspect ftp

inspect icmp

inspect tftp

service-policy global_policy global

telnet timeout 5

ssh timeout 5

Re: ASA ISSUES

MHM Cisco World — Fri, 01 Dec 2023 04:37:12 GMT

Friend asa is work like router not like sw'

You can not connect multi devices with same subnet to asa.

You need to assign different ip for each pc and router.

Also you need

Same secuirty traffic permit intra interface

Same secuirty traffic permit inter interface

MHM

Re: ASA ISSUES

balaji.bandi — Fri, 01 Dec 2023 11:16:24 GMT

what model of ASA ?

why do you need same subnet in all the interface ? (what is the requirement ?)

Re: ASA ISSUES

BoomBastic1234626283 — Sat, 02 Dec 2023 19:04:41 GMT

Thank you so much. I got it to work.

Re: ASA ISSUES

MHM Cisco World — Sat, 02 Dec 2023 19:07:13 GMT

You are so welcome

Have a nice weekend

MHM

topic Re: ASA ISSUES in Network Security

ASA ISSUES

Re: ASA ISSUES

Re: ASA ISSUES

Re: ASA ISSUES

Re: ASA ISSUES