topic Re: ASA lab enviroment question in Network Security https://community.cisco.com/t5/network-security/asa-lab-enviroment-question/m-p/1210315#M877605 <HTML><HEAD></HEAD><BODY><P>I've attached config's.</P><P>Just need to copy/paste.</P><P></P><P></P><P> </P><P></P></BODY></HTML> Thu, 15 Jan 2009 22:47:33 GMT fredj1234 2009-01-15T22:47:33Z ASA lab enviroment question https://community.cisco.com/t5/network-security/asa-lab-enviroment-question/m-p/1210312#M877598 <P>Hi,</P><P></P><P>I've tested this setup on both live network and my lab and I still don't understand the reason for this not working. If anyone can provide the reason why, because I find this extremely frustrating. I'm more than happy to provide config that I'm using if any can help out.</P><P></P><P>Thanks, -Fred</P><P></P><P>There are 3 devices in an internal network. </P><P>-1 Router, 1 ASA, 1 PC</P><P></P><P>Setup:</P><P>-Router (inside network) has 2 Loopback interfaces on differenet networks and an ethernet interface on same network as ASA and PC. Router is running EIGRP. Router is advertising networks belonging to all configured interfaces.</P><P></P><P>-ASA has default GW pointing to outside, PAT'ing inside network to outside interface. Running EIGRP and advertising its inside network only. ASA can successfully ping loopback interfaces on router.</P><P></P><P>-PC on same network as ASA (inside) and router. Gateway IP is set as the ASA's inside IP.</P><P></P><P>---------------------------------------</P><P></P><P>Now, from the PC cannot ping loopback interfaces on router, but can go to the internet. (GW IP is ASA)</P><P></P><P>If you create a nonat statement on ASA to reach the loopback networks the PC can ping the loopback IP address.</P><P></P><P>If you try to do anything other than send icmp packets to the loopback IP's from the PC they do not respond.</P><P></P><P>Why is this??? </P><P></P><P>I know if I change the PC's GW ip address to the router, and make the router's default GW point to the ASA everything will work. I just don't understand why I can't make the ASA my PC's gw and have everything work.</P> Mon, 11 Mar 2019 14:37:48 GMT https://community.cisco.com/t5/network-security/asa-lab-enviroment-question/m-p/1210312#M877598 fredj1234 2019-03-11T14:37:48Z Re: ASA lab enviroment question https://community.cisco.com/t5/network-security/asa-lab-enviroment-question/m-p/1210313#M877601 <HTML><HEAD></HEAD><BODY><P>Can you post configs</P><P></P><P>Jon</P></BODY></HTML> Thu, 15 Jan 2009 18:53:14 GMT https://community.cisco.com/t5/network-security/asa-lab-enviroment-question/m-p/1210313#M877601 Jon Marshall 2009-01-15T18:53:14Z Re: ASA lab enviroment question https://community.cisco.com/t5/network-security/asa-lab-enviroment-question/m-p/1210314#M877603 <HTML><HEAD></HEAD><BODY><P>This is a hair-pinning issue. You will need to </P><P>add "permit intra security" or something on the </P><P>ASA to make it work.</P><P></P><P>Easy right?</P></BODY></HTML> Thu, 15 Jan 2009 20:44:54 GMT https://community.cisco.com/t5/network-security/asa-lab-enviroment-question/m-p/1210314#M877603 cisco24x7 2009-01-15T20:44:54Z Re: ASA lab enviroment question https://community.cisco.com/t5/network-security/asa-lab-enviroment-question/m-p/1210315#M877605 <HTML><HEAD></HEAD><BODY><P>I've attached config's.</P><P>Just need to copy/paste.</P><P></P><P></P><P> </P><P></P></BODY></HTML> Thu, 15 Jan 2009 22:47:33 GMT https://community.cisco.com/t5/network-security/asa-lab-enviroment-question/m-p/1210315#M877605 fredj1234 2009-01-15T22:47:33Z