topic Single Network to Internet Configuration Check Please in Network Security

Single Network to Internet Configuration Check Please

patrick.hurley — Tue, 12 Mar 2019 01:50:26 GMT

Can someone please look at this configuration and check to see why it might not let me get from inside out please?

Single Network to Internet Configuration Check Please

mvsheik123 — Wed, 29 May 2013 00:35:12 GMT

Hi Patrick,

How your pc/Internal machines getting IP? If you are not using static IP with ASA Vlan1 interface IP as gateway, you need to configure DHCP on ASA. Check the link below.

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/basic_dhcp.html

hth

Re: Single Network to Internet Configuration Check Please

patrick.hurley — Wed, 29 May 2013 02:48:20 GMT

I have a DHCP server. Is the ASA configuration correct if all else is set up properly on the inside? I am having an issue where the ASA can ping the uverse router next hop but nothing inside can ping through the FW even though packet tracer shows it passing all steps. I want to confirm that the configuration is good before moving on to troubleshoot other things.

Single Network to Internet Configuration Check Please

kenrandrews — Wed, 29 May 2013 17:22:58 GMT

I looked at the config and it looks good, default route and NAT are what I would expect to cause you issues based on the issue you are having. Are you pinging from the outside interface? My guess is that if you try to ping from the inside it would fail, ping inside 99.179.xxx.xxx. This is likely because you are not inspecting icmp traffic.

policy-map global_policy

class inspection_default

inspect icmp

Did you try to get to anything using a web browser as http is inspected by default. If none of this check the logs

logging buffer-size 4000

logging buffered informational

Try to ping then "show log"

Hope that helps.