topic ASA basic configuration - NAT and pinging externally in Network Security

ASA basic configuration - NAT and pinging externally

twhittle1 — Tue, 12 Mar 2019 07:48:45 GMT

Hi All,

I'm trying to get to grips with ASAs, I'm used to routers and switches, haven't touched an ASA before this week and I'm trying to get one working however I am stumbling all over the place.

Can someone give me a jump start because I thought I was ok at "this networking lark" but now I'm struggling to get an ASA to even talk to the internet, so I'm feeling a little silly about now.

I have wiped the ASA, been through the startup wizard in ADSM and added ICMP to the default service policy rule inspection. I have my ASA directly connected to an ADSL modem and the outside interface has successfully picked up the ip address via DHCP. The interface is set to "obtain default route using DHCP". There is a default route showing in the routing table: d* 0.0.0.0 0.0.0.0 [1/0] via x.x.x.x, outside

I have configured NAT translation

object network obj_any
nat (inside,outside) dynamic interface

object network obj_any
subnet 0.0.0.0 0.0.0.0

I cannot ping the ASA outside interface from the inside client.

I cannot ping 8.8.8.8 from the ASA - I get ????? as a result.

Can anyone help? Am I missing something really simple? Or am I being really silly?

Happy to post some config but I didn't want to clutter the initial post.

Many Thanks,

Tom

Try adding "icmp error" to

Philip D'Ath — Sun, 29 May 2016 03:16:22 GMT

Try adding "icmp error" to the default inspection policy.

Hi there.

ansarjavaid54 — Sun, 29 May 2016 06:33:19 GMT

Hi there.

Just add your subnet in same nat translation rule like..

object network obj_any

subnet 0.0.0.0 0.0.0.0

nat (inside,outside) dynamic interface...

Hopefully this will work and please Rate the correct answer..

Thanks both, I'll give these

twhittle1 — Tue, 31 May 2016 09:19:50 GMT

Thanks both, I'll give these a try later and let you know the results.

Regards,

Tom

Hi Both,

twhittle1 — Wed, 01 Jun 2016 08:15:18 GMT

Hi Both,

Both of these were already configured so sadly they didn't work. However last night I put an 877 router in between the ASA and the Internet and suddenly everything started working (after I swapped the dhcp info for a static IP / route on the outside interface). I'm wondering if there's something wrong / amiss between the ADSL modem and the ASA.

Thanks both for your assistance and suggestions.

Regards,

Tom

There must be a configuration

Philip D'Ath — Wed, 01 Jun 2016 14:50:55 GMT

There must be a configuration issue between the ADSL modem and the ASA.