topic ASA5505 - No internet access from Inside to Outside in Network Security

ASA5505 - No internet access from Inside to Outside

kxv_vermilk — Tue, 12 Mar 2019 02:00:42 GMT

First, I have little to no knowledge of firewalls and these types of devices.

I did folllow the setup wizard and everything appears to be fine at the completion. However; something is not correct or missing. I have no internet access when connected to this device. I cannot ping or run a tracert in addition to no internet access.

I have noticed several different messages in the log as I attempt each of the above commands.

Here are a few of the messages:

- Failed to locate egress interface for UDP from inside...

- Routing failed to locate the next hop for ICMP from NP Identity....

- Deny TCP (no connection) from 192.168.1.6/2899 to 192.168.1.1/443...

I have provided my config. It looks pretty basic to me with no big options.

Thanks for any help!

Kevin

Re: ASA5505 - No internet access from Inside to Outside

jebose — Wed, 19 Jun 2013 20:36:10 GMT

Hi Kevin,

The dafault route us missing from config.

with the below config i am sure that you have a static ip address from isp.

------------------

interface Vlan2

nameif outside

security-level 0

ip address 173.190.xxx.xxx 255.255.255.252

-----------------

we need to add a default route to the next hop unit(isp unit).

for eg -- route outside 0 0 173.190.x.x 1 // we specifying that unknown destination based traffic should be left to next hop 173.190.xx.xx.

Let me know how it goes.

Regards,

Jesu Kumar Bose

ASA5505 - No internet access from Inside to Outside

kxv_vermilk — Wed, 19 Jun 2013 20:47:02 GMT

OK, so I feel stupid.

Thanks a bunch for the help Jesu!