topic Re: Setup problem with ASA5505 in Network Security https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098063#M894980 <HTML><HEAD></HEAD><BODY><P>OK - glad to help.</P></BODY></HTML> Fri, 17 Oct 2008 10:11:27 GMT andrew.prince 2008-10-17T10:11:27Z Setup problem with ASA5505 https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098055#M894966 <P>Hi,</P><P></P><P>I've been asked to setup an ASA5505 for the first time. I've not had any experience with the ASA's and can't seem to get it working.</P><P></P><P>Presently I can ping google (66.249.93.99) from the ASA (via hyperterminal) however I can't ping out from a host on the internal network (192.168.1.26).</P><P></P><P>I'm guessing that the NAT setup is wrong..? Can someone take a look at the attached config and point me in the right direction?</P><P></P><P>TIA,</P><P>H</P><P></P><P> </P><P></P> Mon, 11 Mar 2019 13:58:40 GMT https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098055#M894966 huwyhuwy123 2019-03-11T13:58:40Z Re: Setup problem with ASA5505 https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098056#M894968 <HTML><HEAD></HEAD><BODY><P>You NAT looks OK - but your dhcp does not have a DNS entry? How are you pinging google, by IP or name?</P></BODY></HTML> Fri, 17 Oct 2008 09:06:36 GMT https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098056#M894968 andrew.prince 2008-10-17T09:06:36Z Re: Setup problem with ASA5505 https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098057#M894970 <HTML><HEAD></HEAD><BODY><P>By IP (66.249.93.99)</P></BODY></HTML> Fri, 17 Oct 2008 09:08:16 GMT https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098057#M894970 huwyhuwy123 2008-10-17T09:08:16Z Re: Setup problem with ASA5505 https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098058#M894972 <HTML><HEAD></HEAD><BODY><P>can you ping the IP from the host on the inside - and on the asa post the output of "show xlate"</P></BODY></HTML> Fri, 17 Oct 2008 09:11:01 GMT https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098058#M894972 andrew.prince 2008-10-17T09:11:01Z Re: Setup problem with ASA5505 https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098059#M894974 <HTML><HEAD></HEAD><BODY><P>Cheers Andrew.</P><P></P><P>I can't ping the IP from the inside - only from the ASA itself. Show xlate is below.....</P><P></P><P>0 in use, 1 most used</P><P></P><P>-H</P></BODY></HTML> Fri, 17 Oct 2008 09:13:56 GMT https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098059#M894974 huwyhuwy123 2008-10-17T09:13:56Z Re: Setup problem with ASA5505 https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098060#M894975 <HTML><HEAD></HEAD><BODY><P>Sorry - I missed something critical, add the below and re-test:-</P><P></P><P>access-list acl-outside extended permit icmp any any echo-reply</P><P>access-list acl-outside extended permit icmp any any unreachable</P><P>access-list acl-outside extended permit icmp any any traceroute</P><P>access-list acl-outside extended permit icmp any any time-exceeded</P><P></P><P>access-group acl-outside in interface outside</P><P></P><P></P></BODY></HTML> Fri, 17 Oct 2008 09:16:08 GMT https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098060#M894975 andrew.prince 2008-10-17T09:16:08Z Re: Setup problem with ASA5505 https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098061#M894977 <HTML><HEAD></HEAD><BODY><P>Thats great Andrew. I didn't realise you had to explicitly allow the traffic back in. All working.</P><P></P><P>Can I be cheeky and ask 1 more question..?</P><P></P><P>I need to setup port forwarding to a citrix server. Presumably I need to add port 1494 to "acl-outside" but I'm not sure what the static NAT command should be - can you help?</P></BODY></HTML> Fri, 17 Oct 2008 09:57:31 GMT https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098061#M894977 huwyhuwy123 2008-10-17T09:57:31Z Re: Setup problem with ASA5505 https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098062#M894979 <HTML><HEAD></HEAD><BODY><P>Don't worry - I worked it out. thanks for your help!</P></BODY></HTML> Fri, 17 Oct 2008 10:07:58 GMT https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098062#M894979 huwyhuwy123 2008-10-17T10:07:58Z Re: Setup problem with ASA5505 https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098063#M894980 <HTML><HEAD></HEAD><BODY><P>OK - glad to help.</P></BODY></HTML> Fri, 17 Oct 2008 10:11:27 GMT https://community.cisco.com/t5/network-security/setup-problem-with-asa5505/m-p/1098063#M894980 andrew.prince 2008-10-17T10:11:27Z