topic Re: Need configuration assistance on Cisco ASA 5510 please in Network Security

Need configuration assistance on Cisco ASA 5510 please

m-abooali — Mon, 11 Mar 2019 12:49:21 GMT

HI,

first time ocnfiguring ASA. I have configure two ASA devices, Promary and secondar and the failover seem to be working but I have routing issues in which I cannot reach devices behind the ASA.

both Inside and Outside Interfaces have Public IP addreses and customer doesn't want NAT. I have added static router inside to the inside block gateway IP which is on the core router. and also static outside 0/0 outside interface.

I havenot done any translation and think that might have contributed to this problem but wanted to see if I need to create a global outside interface since i have no NAT?

Regards,

Masood

Re: Need configuration assistance on Cisco ASA 5510 please

Alan Huseyin Kayahan — Sat, 24 May 2008 13:31:21 GMT

Hi Masood

If customer doenst want NAT, simply issue "no nat-control" in firewalls and do not spend time on exempt nat statements

Regards

Re: Need configuration assistance on Cisco ASA 5510 please

m-abooali — Sat, 24 May 2008 16:11:45 GMT

Hi and thanks for your input.

The problem was due to the stupid "no proxy Arp" on the inside Interface!

that was scrwing up all the routing that I had in there. so upon disabling the proxy Arp on the inside interface all the servers behind the firewall were able to hit th eInternet!

Thx,

Masood