topic You'll need a static route on in Network Security

Static Route needed?

MavsX4142 — Tue, 12 Mar 2019 06:32:18 GMT

Can't seem to find anything on google directly related to this, and my cisco lingo is very very rusty.

Here is my setup

comcast modem 192.168.1.0/24 -------------> Cisco ASA5505 Outside interface is 192.168.1.251 Inside interface 10.1.1.1/24

I've got my Kodi box connected via wifi at 192.168.1.51/24

I've got my freenas server connected via wired connection inside the ASA at 10.1.1.55/24

I want to enable the kodi box to connect through the ASA to the freenas box.

What do i need?

ciscoasa(config)# show version

Cisco Adaptive Security Appliance Software Version 7.2(4)
Device Manager Version 5.2(4)

Compiled on Sun 06-Apr-08 13:39 by builders
System image file is "disk0:/asa724-k8.bin"
Config file at boot was "startup-config"

ciscoasa(config)# show interface ip brief
Interface IP-Address OK? Method Status Protocol
Internal-Data0/0 unassigned YES unset up up
Internal-Data0/1 unassigned YES unset administratively down up
Loopback0 127.0.0.1 YES unset up up
Vlan1 10.1.1.1 YES CONFIG up up
Vlan2 192.168.1.251 YES CONFIG up up

ciscoasa(config)# show route

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route

Gateway of last resort is 192.168.1.1 to network 0.0.0.0

C 127.0.0.0 255.255.255.0 is directly connected, _internal_loopback
C 10.1.1.0 255.255.255.0 is directly connected, inside
C 192.168.1.0 255.255.255.0 is directly connected, outside
S* 0.0.0.0 0.0.0.0 [1/0] via 192.168.1.1, outside

You'll need a static route on

Luke Russell — Thu, 03 Sep 2015 02:55:21 GMT

You'll need a static route on your comcast modem (or the Kodi box) to 10.1.1.0/24 pointing to the outside interface of the ASA - 192.168.1.251.

Ok. Thanks for the help. I

MavsX4142 — Thu, 03 Sep 2015 16:16:34 GMT

Ok. Thanks for the help. I will try that and report back. Don't i need a rule though on the ASA to allow traffic from the kodi box through the firewall to access the freenas server?

You know what kodi is right? it's the newer version of XBMC, and i have my media and other files on the freenas server, which is basically just a CIFS share on that server.

Yes you'll need that rule on

Luke Russell — Thu, 03 Sep 2015 20:52:10 GMT

Yes you'll need that rule on the firewall as well. I presumed you knew about that. As for Kodi, I use it myself directly on the file server / media PC.

Yes, like i mentioned in the

MavsX4142 — Fri, 04 Sep 2015 01:50:14 GMT

Yes, like i mentioned in the first post, my cisco commands have left me, so i have no idea what i need to do on that asa. Got any ideas for me?

No sorry, I'd have to look it

Luke Russell — Fri, 04 Sep 2015 02:32:52 GMT

No sorry, I'd have to look it up myself. Firewall's aren't something I've had a chance to work on yet.