topic Re: Problem to access the web server from outside in Network Security

Problem to access the web server from outside

sroodit81 — Fri, 21 Feb 2020 15:59:22 GMT

hi dears

please i have problem to access my web server from outside

my scenario it is have multiple network subnet like in the diagram

and i enable the routing between all

please can you support me to fixing my problem

Bogdan Nita — Mon, 16 Jul 2018 11:22:32 GMT

Config looks ok, it must be a combination between bridge-group and nat.

Did you try to configure the static nat as policy without "after-auto" instead of object nat ?

What is the output from packet-tracer input outside tcp 1.1.1.1 1025 56.56.56.3 80 ?

HTH

Bogdan

sroodit81 — Mon, 16 Jul 2018 11:31:25 GMT

i don't run this configuration in packet trace

i just used packet trace to design my scenario

and i run same configuration with direct connect to Web server it be ok to access but when i have multiple subnet i missing the access to web server

also i have ping from the ASA to All subnet and And vice versa

Bogdan Nita — Mon, 16 Jul 2018 13:19:24 GMT

I meant the packet-tracer command.

Why do you need the bridge-group if you are routing all internal networks to 172.17.20.2 ?

If bridge-group is not necessary i would recommend removing it.