Cannot get Cisco 5510 ASA (simple config) to reach internet traffic

Darren Lapierre — Tue, 12 Mar 2019 00:31:06 GMT

Hello,

I have been at this for the past few hours now. I just cannot get this device to pass through traffic to the internet. Here is the basic topology:

Default Gateway (ISP): 208.118.125.129/29

IP of outside int (e0/0): 208.118.125.130/29

ip of inside int (e0/1): 10.1.1.1/24

Can someone check over this config to see what exactly I am doing wrong?!?

igniteCSGfw(config)# sho run

: Saved

ASA Version 8.0(4)

hostname igniteCSGfw

enable password awUSpLuFs5wdhqJE encrypted

passwd 2KFQnbNIdI.2KYOU encrypted

names

interface Ethernet0/0

nameif outside

security-level 0

ip address 208.118.125.129 255.255.255.248

interface Ethernet0/1

nameif inside

security-level 100

ip address 10.1.1.1 255.255.255.0

interface Ethernet0/2

shutdown

no nameif

no security-level

no ip address

interface Ethernet0/3

shutdown

no nameif

no security-level

no ip address

interface Management0/0

nameif management

security-level 100

ip address 192.168.1.1 255.255.255.0

management-only

ftp mode passive

pager lines 24

logging asdm informational

mtu management 1500

mtu inside 1500

mtu outside 1500

icmp unreachable rate-limit 1 burst-size 1

asdm image disk0:/asdm-621.bin

no asdm history enable

arp timeout 14400

global (outside) 1 interface

nat (inside) 1 10.1.1.0 255.255.255.0

route outside 0.0.0.0 0.0.0.0 208.118.125.129 1

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00

timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00

timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

dynamic-access-policy-record DfltAccessPolicy

http server enable

http 10.0.0.0 255.0.0.0 inside

http 192.168.1.0 255.255.255.0 management

no snmp-server location

no snmp-server contact

snmp-server enable traps snmp authentication linkup linkdown coldstart

crypto ipsec security-association lifetime seconds 28800

crypto ipsec security-association lifetime kilobytes 4608000

telnet timeout 5

ssh 10.0.0.0 255.0.0.0 inside

ssh timeout 60

console timeout 0

dhcpd address 192.168.1.2-192.168.1.254 management

dhcpd enable management

threat-detection basic-threat

threat-detection statistics access-list

no threat-detection statistics tcp-intercept

username ignitecsg password 028ZcrY5F/cbezVk encrypted privilege 15

class-map inspection_default

match default-inspection-traffic

policy-map type inspect dns preset_dns_map

parameters

message-length maximum 512

policy-map global_policy

class inspection_default

inspect dns preset_dns_map

inspect ftp

inspect rsh

inspect rtsp

inspect esmtp

inspect sqlnet

inspect skinny

inspect sunrpc

inspect xdmcp

inspect netbios

inspect tftp

service-policy global_policy global

prompt hostname context

Cryptochecksum:0e10c8fc53f57682a381a0d0f714a8c3

: end

igniteCSGfw(config)#

Cannot get Cisco 5510 ASA (simple config) to reach internet traf

Muhammed Safwan — Sun, 02 Dec 2012 01:29:02 GMT

you have mentioned the IP of outside int (e0/0): 208.118.125.130 but your configuration shows ip address 208.118.125.129. I think this could be the issue.

Pls rate, if its helpful

With Regards,

Safwan

Cannot get Cisco 5510 ASA (simple config) to reach internet traf

Darren Lapierre — Sun, 02 Dec 2012 01:38:47 GMT

... well then.

Let me try that and I will report back. Thanks Safwan!

Cannot get Cisco 5510 ASA (simple config) to reach internet traf

Darren Lapierre — Sun, 02 Dec 2012 01:44:03 GMT

that did it.

man. I am such a bonehead.

Thanks!

topic Cannot get Cisco 5510 ASA (simple config) to reach internet traf in Network Security

Cannot get Cisco 5510 ASA (simple config) to reach internet traffic

Cannot get Cisco 5510 ASA (simple config) to reach internet traf

Cannot get Cisco 5510 ASA (simple config) to reach internet traf

Cannot get Cisco 5510 ASA (simple config) to reach internet traf