topic Hello Miguel, I have checked in Network Security

internet access issue trough ASA

Miguel Ortega — Tue, 12 Mar 2019 06:34:30 GMT

Dear All

I have a ASA (9.1) where users can Access to internet, default Gateway is a L3 catalyst, behind that catalyst and i have another router and i need to give internet Access to them also, ping is ok from their network but they can´t Access to any web, for instance they can ping to www.youtube.com but web can´t load on their browsers

ASA -----L3 (Gateway)-----router------users network

On Asa i have configurated tcp by pass option for users network but there is no difference.

thanks in advance for any help

Miguel Ortega

Hi,Do you have the correct

Vibhor Amrodia — Wed, 09 Sep 2015 18:39:02 GMT

Hi,

Do you have the correct configuration on the ASA device ? Did you check the DNS settings ?

Can you share the configuration from the device ?

Thanks and Regards,

Vibhor Amrodia

DNS settings are OK, i am not

Miguel Ortega — Wed, 09 Sep 2015 19:27:45 GMT

DNS settings are OK, i am not pretty sure about configuración because i have not a lot of experience with ASA

attached i am sending the configuration

thanks

Hi,Can you try to run this

Vibhor Amrodia — Wed, 09 Sep 2015 20:21:57 GMT

Hi,

Can you try to run this tracer on the ASA device to verify the rules:-

packet input LAN tcp <IP address of the machine that you are trying to access the website from> 3456 4.2.2.2 80 det

Thanks and Regards,

Vibhor Amrodia

Hello Miguel, I have checked

jadesha.jeer1 — Thu, 10 Sep 2015 16:15:04 GMT

Hello Miguel,

I have checked your asa configuration, looks to be there is no PAT configured for any internet traffic from your LAN network.

Try below config:

object network <NAME>

subnet <local LAN user network>
nat (LAN,Internet) dynamic interface

This will work.. 🙂

Thanks- Jadesh