ASA Setup Help

Ayan0chk0 — Sat, 02 Dec 2023 21:17:33 GMT

Hi everyone,

I just had a configuration question regarding a 5506-X ASA in packet tracer. I can't ping the router connected to the ASA. Everything is sub-netted properly to my knowledge and the interface Gig0/1 on the router has an address of 10.210.200.1/28, the Gig1/1 on the ASA is 10.210.200.17/28. I'll include a screenshot of my topology as well as my running config on the ASA. I feel like I'm missing something simple so any help would be appreciated.

ASA Version 9.6(1)

hostname Remote-ASA

names

interface GigabitEthernet1/1

nameif OUTSIDE

security-level 100

ip address 10.210.200.17 255.255.255.240

interface GigabitEthernet1/2

nameif INSIDE

security-level 100

ip address 10.210.200.33 255.255.255.240

interface GigabitEthernet1/3

nameif ADMIN

security-level 100

ip address 10.210.200.49 255.255.255.240

interface GigabitEthernet1/4

no nameif

no security-level

no ip address

shutdown

interface GigabitEthernet1/5

no nameif

no security-level

no ip address

shutdown

interface GigabitEthernet1/6

no nameif

no security-level

no ip address

shutdown

interface GigabitEthernet1/7

no nameif

no security-level

no ip address

shutdown

interface GigabitEthernet1/8

no nameif

no security-level

no ip address

shutdown

interface Management1/1

management-only

no nameif

no security-level

no ip address

shutdown

object network ADMIN-NET

subnet 10.210.200.48 255.255.255.240

nat (ADMIN,OUTSIDE) dynamic interface

object network INSIDE-NET

subnet 10.210.200.32 255.255.255.240

nat (INSIDE,OUTSIDE) dynamic interface

route OUTSIDE 0.0.0.0 0.0.0.0 10.210.200.1 1

access-list icmp_traffic extended permit icmp any any echo-reply

class-map inspection_default

match default-inspection-traffic

policy-map type inspect dns preset_dns_map

parameters

message-length maximum 512

policy-map global_policy

class inspection_default

inspect dns preset_dns_map

inspect ftp

inspect icmp

inspect tftp

service-policy global_policy global

telnet timeout 5

ssh timeout 5

Re: ASA Setup Help

MHM Cisco World — Sat, 02 Dec 2023 21:20:06 GMT

interface GigabitEthernet1/1

nameif OUTSIDE

security-level 0

Change the secuirty level of outside to be 0 not 100

MHM

Re: ASA Setup Help

Ayan0chk0 — Sun, 03 Dec 2023 02:41:50 GMT

MHM,
I changed the security level of GigabitEthernet1/1 and still can't ping from the ASA to the router. Is there something else it could be?

Re: ASA Setup Help

MHM Cisco World — Sun, 03 Dec 2023 02:45:15 GMT

Ping from pc connect to asa to router not from asa.

Re: ASA Setup Help

MHM Cisco World — Sun, 03 Dec 2023 02:48:29 GMT

Or use

Asa#ping

Then select source interface, which must be IN.

MHM

topic Re: ASA Setup Help in Network Security

ASA Setup Help

Re: ASA Setup Help

Re: ASA Setup Help

Re: ASA Setup Help

Re: ASA Setup Help