topic Cannot access Internet or ping from inside interface in Network Security

Cannot access Internet or ping from inside interface

cthomas58 — Mon, 11 Mar 2019 21:04:44 GMT

I am having a problem configuring my ASA 5505 for NAT.

Based on my research the following config should work.

What am I missing.

Chris

varrao — Wed, 27 Jul 2011 17:56:41 GMT

Hi Chris,

The configuration looks good to me. Could you atke logs and captures, enable the following command:

access-list cap permit ip any host 4.2.2.2

access-list cap permit ip host 4.2.2.2 any

cap capin access-list cap interface inside

cap capo access-list cap interface outside

and to enable logs;

logging enable

logging buffered 7

and then initiate a ping from any inside machine and take the captures and logs.

show cap capin

show cap capo

show logging

these outputs would isolate the issue a lot.

and also if you are replacing the firewall, i would suggest you reload the ISP router and ASA once after saving the configuration.

Thanks,

Varun

cthomas58 — Wed, 27 Jul 2011 18:03:54 GMT

Thanks for the reply.

I found the problem, I had mis-configured the workstation.

Chris

varrao — Wed, 27 Jul 2011 18:05:22 GMT

Ohhh ok...thats good

-Varun