Internet Access through ASA - Help

[Fantas]

Hi,

I want to allow internet access for host within 172.12.0.0/16 network to access internet. I have created source nat and ACL to allow traffic but still users cant access internet. please find below config i have done and guide for any missing stuff.

nat (inside,outside) source dynamic Net_172.12.0.0   202.5.X.X

access-list acl_inside permit ip object Net_172.12.0.0 any4

[Francesco Molino]

Hi

Remove your nat and try this one:

object network Net_172.12.0.0
nat (Inside,Outside) dynamic interface

If not working, can you share the full config please?

[Fantas]

Thanks it works.

Actual I used ip address instead of interface.

But did same you mentioned , nat under object

[Francesco Molino]

Ok good. Ip is good if you want to have a nat on a different ip than the outside interface

[johnlloyd_13]

hi,

is the 172.12.0.0/16 directly connected on the ASA? or is there a router/L3 device behind it?

if it's the latter, then you'll need a static route to reach the said subnet.

route inside 172.12.0.0 255.255.0.0 <router hop ip> 1