topic Internet Access through ASA - Help in Network Security

Internet Access through ASA - Help

Fantas — Fri, 17 Jan 2020 02:23:39 GMT

Hi,

I want to allow internet access for host within 172.12.0.0/16 network to access internet. I have created source nat and ACL to allow traffic but still users cant access internet. please find below config i have done and guide for any missing stuff.

nat (inside,outside) source dynamic Net_172.12.0.0 202.5.X.X

access-list acl_inside permit ip object Net_172.12.0.0 any4

Re: Internet Access through ASA - Help

Francesco Molino — Fri, 17 Jan 2020 03:48:32 GMT

Hi

Remove your nat and try this one:

object network Net_172.12.0.0
nat (Inside,Outside) dynamic interface

If not working, can you share the full config please?

Re: Internet Access through ASA - Help

johnlloyd_13 — Fri, 17 Jan 2020 14:50:09 GMT

hi,

is the 172.12.0.0/16 directly connected on the ASA? or is there a router/L3 device behind it?

if it's the latter, then you'll need a static route to reach the said subnet.

route inside 172.12.0.0 255.255.0.0 <router hop ip> 1

Re: Internet Access through ASA - Help

Fantas — Tue, 21 Jan 2020 04:54:15 GMT

Thanks it works.

Actual I used ip address instead of interface.

But did same you mentioned , nat under object

Re: Internet Access through ASA - Help

Francesco Molino — Wed, 22 Jan 2020 03:34:50 GMT

Ok good. Ip is good if you want to have a nat on a different ip than the outside interface