Hello, I am new at this, and I try to configure an HTTP server to be accessible from an outside network in Packet Tracer.
Its pretty hard to describe, so I will try the best I can.
At the moment all my seting are working from inside my network, the problem I got is the outside client send the dns request as normal and receive it, but never send a HTTP request for the website and I get a request time out.
I also incule in this tread my .pkt file and a screenshot of my dns server and a screenshot of my network.
there is my firewall config, and I am willing to discust with you si I can learn and fix my problem.
Firewall#show running
: Saved
:
ASA Version 9.6(1)
!
hostname Firewall
domain-name climoilou.ca
names
!
interface GigabitEthernet1/1
nameif Outside
security-level 0
ip address 10.0.0.2 255.255.255.0
!
interface GigabitEthernet1/2
nameif DNS
security-level 100
ip address 10.0.1.1 255.255.255.0
!
interface GigabitEthernet1/3
nameif Web
security-level 100
ip address 10.0.2.1 255.255.255.0
!
interface GigabitEthernet1/4
nameif Lab1
security-level 100
ip address 10.0.3.1 255.255.255.0
!
interface GigabitEthernet1/5
nameif Lab2
security-level 100
ip address 10.0.4.1 255.255.255.0
!
interface GigabitEthernet1/6
nameif Lab3
security-level 100
ip address 10.0.5.1 255.255.255.0
!
interface GigabitEthernet1/7
nameif Lab4
security-level 100
ip address 10.0.6.1 255.255.255.0
!
interface GigabitEthernet1/8
no nameif
no security-level
no ip address
shutdown
!
interface Management1/1
management-only
no nameif
no security-level
no ip address
!
object network inside-net
subnet 10.0.1.0 255.255.255.0
!
route Outside 0.0.0.0 0.0.0.0 10.0.0.1 1
!
access-list group extended permit tcp any any eq domain
access-list group extended permit tcp any any eq www
access-list group extended permit tcp any any eq smtp
access-list group extended permit tcp any eq domain any
access-list group extended permit udp any eq domain any
access-list group extended permit udp any any eq domain
access-list group extended permit icmp any any echo
access-list group extended permit icmp any any echo-reply
access-list group extended permit tcp any any eq pop3
!
!
access-group group in interface Outside
!
aaa authentication ssh console LOCAL
!
!
username admin password 4IncP7vTjpaba2aF encrypted
!
class-map inspection_default
match default-inspection-traffic
!
policy-map global_policy
class inspection_default
inspect http
inspect icmp
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global-policy
!
service-policy global_policy global
!
telnet timeout 5
ssh 10.0.1.0 255.255.255.0 DNS
ssh 203.1.2.0 255.255.255.0 Outside
ssh timeout 10
!
dhcpd address 10.0.3.100-10.0.3.131 Lab1
dhcpd dns 10.0.1.50 interface Lab1
dhcpd enable Lab1
!
dhcpd address 10.0.4.100-10.0.4.131 Lab2
dhcpd dns 10.0.1.50 interface Lab2
dhcpd enable Lab2
!
dhcpd address 10.0.5.100-10.0.5.131 Lab3
dhcpd dns 10.0.1.50 interface Lab3
dhcpd enable Lab3
!
dhcpd address 10.0.6.100-10.0.6.131 Lab4
dhcpd dns 10.0.1.50 interface Lab4
dhcpd enable Lab4
