topic Re: ASA 5505 in Network Security

ASA 5505

David Joseph — Fri, 21 Feb 2020 16:01:12 GMT

Hello I have a 5505 that I can't access the outside network from the inside. I can ping from the firewall outside. From inside connected to my laptop I can ping my gateway but can't ping outside or browse the web. I'm inspecting icmp and I set the DNS servers. I can see the nat translations happening but I'm missing something. Any help in figuring out what I'm missing would be greatly appreciated.

Re: ASA 5505

Troy Jackson — Wed, 25 Jul 2018 20:17:46 GMT

Can you post your config?

Re: ASA 5505

David Joseph — Thu, 26 Jul 2018 15:53:48 GMT

Re: ASA 5505

raufm — Wed, 25 Jul 2018 20:27:57 GMT

You can try running the following command to see where it fails.

packet-tracer input inside tcp <your laptop IP Address> 23456 8.8.8.8 443 detail

See the step where it fails

Re: ASA 5505

David Joseph — Wed, 25 Jul 2018 20:57:33 GMT

Thanks I ran that packet trace and here's the results from that. Result:
input-interface: inside
input-status: up
input-line-status: up
output-interface: outside
output-status: up
output-line-status: up
Action: allow

Re: ASA 5505

Troy Jackson — Wed, 25 Jul 2018 21:26:14 GMT

Could you try using the outside interface for the NAT since you can access the outside from the firewall?

ex.

object network obj_any

nat (inside,outside) source dynamic interface

Re: ASA 5505

dasiimwe — Thu, 26 Jul 2018 05:03:06 GMT

Confirm that your inside interface is assigned to vlan 1

interface Ethernet0/1
switchport access vlan 1

Also confirm you have a static route to your inside subnets.

route inside 10.0.0.1 255.255.255.0

PS:- word to the wise DO NOT post your company's configs to this public forum especially your ASA configs. Soon or later your company's cybersecurity team will find this post and you will probably get fired.

** hostname:UNI**

** username admin password ***

As you can see the config is now permanently cached on google for all to see.

https://www.google.com/search?&q=unitrendsasa

Re: ASA 5505

David Joseph — Thu, 26 Jul 2018 17:13:50 GMT

That works if I set the the outside interface to NAT but then it shows my external IP as my outside interface address instead of the NAT address I want to use. I'll figure that part out though. Thanks for the help Troy.