11-01-2012 11:59 AM - edited 03-11-2019 05:17 PM
My web server is out of public IPs. I requested more from my ISP and I got a different range with a different gateway. How do I handle the configuration on my Cisco ASA?
Without any configuration changes to the firewall I saw the traffic hitting it and being blocked. I added an access rule to allow the traffic. I added a virtual interface on the ASA. I added a virtual interface on the web server. Using "Packet Tracer" the traffic flows from the outside interface to the new virtual interface. But I'm unable to access my web server and I don't see any traffic on that IP reaching the web server.
Using Cisco ASA 5510.
Please ask any questions and I will add more information as needed.
11-01-2012 12:08 PM
Hello Darren,
What version are you running,
What is the private ip of the server ( use a fake if required), then share the relevant configuration ( Nat, interface and ACL's using the fake Ips as mentioned before)
Regards
11-01-2012 12:26 PM
ASDM 6.2.
Here are my options for NAT Rules:
I added the dmz.3 interface.
Private IP is set as a virtual interface to the same as the public IP. This is the way our other existing, and working, block is configured.
Here are the Access Rules I setup to allow the traffic.
dmz-network is our original block that is working.
dmz.3-network is the new block that doesn't work.
Here are the interfaces:
11-01-2012 12:30 PM
Hello Darren,
I need the ASA version!
11-01-2012 12:31 PM
ASA version was in the original post: ASA 5510.
11-01-2012 12:31 PM
Can you do
show run nat
show run access-list
That will make it easier for us
11-01-2012 12:33 PM
Result of the command: "show run nat"
nat (inside) 0 access-list inside_nat0_outbound
nat (dmz) 0 access-list dmz_nat0_outbound
11-01-2012 12:34 PM
Unfortuantly I can't copy and paste the show run access-list there is so much there. I will try to clean it up and post soon.
But the traffic is allowed in the Access List for "dmz3", just like "dmz".
dmz is working, dmz3 is not.
11-01-2012 12:35 PM
Hello Darren,
Please check your inbox
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide