topic Re: asa 5505 can't access the Internet. Routing trouble? in Network Security

asa 5505 can't access the Internet. Routing trouble?

robbhanMid — Mon, 11 Mar 2019 13:18:43 GMT

I can't access the default gw and therefore not the internet.

I'm trying to figure out if I'm doing something wrong or if my ISP is the one to blame.

I have configured the external interface ( outside )

interface Vlan2

nameif outside

security-level 0

ip address 213.136.41.180 255.255.255.248

I also have routing setup

route outside 192.168.1.0 255.255.255.0 10.10.10.1 1 ( this is for a site-to-site VPN )

route outside 0.0.0.0 0.0.0.0 213.136.41.177 1

The gateway address is 213.136.41.177

I can ping 213.136.41.180 and the other ip addresses our ISP provides but not my default gw.

Am I missing something?

Thanx

Re: asa 5505 can't access the Internet. Routing trouble?

a.alekseev — Wed, 23 Jul 2008 09:22:31 GMT

conf t

access-list NO-NAT permit ip any 192.168.1.0 255.255.255.0

nat (inside) 0 access-list NO-NAT

nat (inside) 1 0 0

global (outside) 1 interface

no route outside 192.168.1.0 255.255.255.0 10.10.10.1 1

Re: asa 5505 can't access the Internet. Routing trouble?

dhananjoy chowdhury — Wed, 23 Jul 2008 09:26:42 GMT

Hi,

First, to check the possibility of problem at ISP end you could directly connect a PC to the router interface and assign the ASA outside IP on the PC, and then try to access internet.

If this works fine then check at ASA end.

Check for the cable/connectivity between the ASA out interface and your Internet router.

Also it would help if you can share the NAT

and access-list statements from your config.

Re: asa 5505 can't access the Internet. Routing trouble?

robbhanMid — Wed, 23 Jul 2008 11:42:08 GMT

Thanx for your reply. I tried connecting my PC directly to the switch and there's no connection. The problem must be at my ISP's end of the stick

Re: asa 5505 can't access the Internet. Routing trouble?

ronshuster — Wed, 23 Jul 2008 12:11:22 GMT

When you connect the PC directly to the Internet switch, make sure you have the correct IP setting on the PC and attempt to ping the default gateway. If that doesn't work, it is likely the ISP. I would double check with the ISP to see if they can ping your PC.