topic ASA 5510 - Configuration advice - No internet in Network Security

ASA 5510 - Configuration advice - No internet

unrealone1 — Tue, 12 Mar 2019 00:35:42 GMT

Hi all,

I am setting up a ASA 5510 for the first time using the GUI.

I have set 0/0 as the Outside and 0/1 as Inside.

I have configured the Outside with the static WAN address and it has connected to my ISP.

But I just cannot get any Internet working on the Inside port. I read somewhere else I need to add static route. Can someone please advise?

Re:ASA 5510 - Configuration advice - No internet

joelgooding — Mon, 10 Dec 2012 23:39:02 GMT

You need to place a default route to carry the traffic from inside to outside. Use the gui to place a static route from 0.0.0.0 0.0.0.0 to the ip of your next hop ip of the isp connection.

Sent from Cisco Technical Support Android App

Re:ASA 5510 - Configuration advice - No internet

unrealone1 — Fri, 14 Dec 2012 12:39:17 GMT

Hi,

IPs are just made up.

I added this static route in, but I still cannot ping anything. Under the interface status, both inside and outside report as UP.

I changed the outside to pick up address by isp dhcp which it does 87.32.32.160/8

But when my ISP gave me the details, they put 87.32.32.160/30

And the defaulty gateway address I am using is the next hop ip. 87.32.32.161

Any thoughts?

ASA 5510 - Configuration advice - No internet

julomban — Fri, 14 Dec 2012 13:22:35 GMT

Hello,

You need to add the ICMP inspection in order to allow ping through, please try the following commands:

clear config fixup

policy-map global_policy

class inspection_default

inspect icmp

Make sure from the ASA itself you can ping out.

Regards,

Juan Lombana

Please rate helpful posts.

ASA 5510 - Configuration advice - No internet

Jouni Forss — Fri, 14 Dec 2012 14:02:08 GMT

Hi,

If you are using DHCP for the ASA outside interface IP the DHCP should provide a default route for your ASA and you dont have to configure it yourself.

To my understanding this is configured with:

"ip address dhcp setroute" where the "setroute" will enable you to get the default route with DHCP.

Dont know if this has anything to do with your problem but thought I'd mention it just incase.

- Jouni

ASA 5510 - Configuration advice - No internet

unrealone1 — Fri, 14 Dec 2012 15:20:42 GMT

I am using the GUI, could you advise of instructions for this.

I can browse to google using one of Google's IP addresses 173.194.66.105

So the connection is up and working. DNS is not. google.com doesnt resolve.

I don't have a DNS Server, so can I make use of the ISP's dns addresses which I do have?

Where should these be placed?

ASA 5510 - Configuration advice - No internet

Jouni Forss — Fri, 14 Dec 2012 15:27:32 GMT

Hi,

Yes, you should use the ISPs DNS servers.

Either you configure the DNS staticly on the actual PCs network adapter settings or if your LAN users are using DHCP from the ASA then you need to configure the DNS servers under the ASAs DHCP configurations.

Are your LAN PCs configured staticly or do they use DHCP? If they use DHCP where is DHCP configured?

If you can actual PING/ICMP something behind the ASA (like the mentioned Google) then you dont need to touch your interface configurations as they seem to be working fine.

- Jouni

ASA 5510 - Configuration advice - No internet

unrealone1 — Mon, 17 Dec 2012 10:43:43 GMT

Thank you that worked.