topic What IP are you translating in Network Security

Cannot ping Internet from Site 2

Mokhalil82 — Tue, 12 Mar 2019 05:53:52 GMT

I cannot get access to the internet via the DR. The router at DR can ping out to 8.8.8.8, however the ASA and the core switch at DR can only ping .28 and .29, they do ping the .17 address but intermittently. Now it seems they have stopped pinging the .17 aswel but the router can ping everything

I have been told by the ISP to point both my gateways to .17 as that will be the HSRP address which currently it is not, as it is configured as the physical interface ip on ISP Router 1 but they are due to configure HSRP on their routers.

I have attached the topology.

Are you translating the

Jon Marshall — Wed, 06 May 2015 19:44:43 GMT

Are you translating the internal private IPs in the DR site to outside interface IP of the DR router ?

Jon

Hi JonThe natting is

Mokhalil82 — Wed, 06 May 2015 20:59:16 GMT

Hi Jon

The natting is happening on the router. On the asa i have configured the nat rule to exempt nat. I seem to be pinging the .28 and .29 external ips ok but not the .17

What IP are you translating

Jon Marshall — Wed, 06 May 2015 21:09:52 GMT

What IP are you translating to on the router is it. the outside interface IP of the DR router ?

Whatever IP it is you haven't used the same IP on your primary site router for any static NAT statements have you ?

Jon

I am translating to the

Mokhalil82 — Wed, 06 May 2015 21:42:10 GMT

I am translating to the external IP of the router. I dont believe im using the outside ip of the router for aby static nat statements. I will double check in the morning when im back on site.

Im sure when i assigned that ip to the router i checked and made sure it was a spare IP