topic ASA 5505 Internet Problem in Network Security

ASA 5505 Internet Problem

hugochengym — Mon, 11 Mar 2019 20:53:07 GMT

Hi ALL

I found a tricky task for our ASA 5505 firewall. I am not able to go internet when using DHCP but I can access by using fixed IP address in client PC.

Same IP, Same Mask, Same DNS, Same Gateway. All the same but no hope. What is your opinion? Any configuration i missed in firewall?

Hugo

ASA 5505 Internet Problem

Maykol Rojas — Thu, 30 Jun 2011 03:34:53 GMT

Hugo,

The IP address that you are talking about, is the one that you assign to the computer or to the outside of the firewall? When you put as DHCP, do you get an Valid IP address? Can you ping the ASA firewall?

Mike

ASA 5505 Internet Problem

hugochengym — Thu, 30 Jun 2011 03:41:03 GMT

Hi Mike

Sure I got a valid IP address from DHCP server and I can ping asa too

Hugo

ASA 5505 Internet Problem

Maykol Rojas — Thu, 30 Jun 2011 03:45:17 GMT

Would you please do a show version on the ASA?

Mike

Re: ASA 5505 Internet Problem

hugochengym — Thu, 30 Jun 2011 05:30:30 GMT

Cisco Adaptive Security Appliance Software Version 8.4(1)
Device Manager Version 6.4(1)

Compiled on Mon 31-Jan-11 02:11 by builders
System image file is "disk0:/asa841-k8.bin"
Config file at boot was "startup-config"

firewall up 3 days 0 hours

Hardware: ASA5505, 512 MB RAM, CPU Geode 500 MHz
Internal ATA Compact Flash, 128MB
BIOS Flash M50FW016 @ 0xfff00000, 2048KB

Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)
                             Boot microcode        : CN1000-MC-BOOT-2.00
                             SSL/IKE microcode     : CNLite-MC-SSLm-PLUS-2.03
                             IPSec microcode       : CNlite-MC-IPSECm-MAIN-2.06
                             Number of accelerators: 1

Re: ASA 5505 Internet Problem

praprama — Fri, 08 Jul 2011 22:37:57 GMT

Hugo,

Have you configured your ASA as the DHCP server? Can you see any logs on the ASA for dropped traffic? you can also get captures on the ASA to see if packets are arriving and leaving the ASA:

https://supportforums.cisco.com/docs/DOC-1222

Regards,

Prapanch