ASA 5505 Internet Problem

[hugochengym]

Hi ALL

I found a tricky task for our ASA 5505 firewall. I am not able to go internet when using DHCP but I can access by using fixed IP address in client PC.

Same IP, Same Mask, Same DNS, Same Gateway. All the same but no hope. What is your opinion? Any configuration i missed in firewall?

Hugo

[Maykol Rojas]

Hugo,

The IP address that you are talking about, is the one that you assign to the computer or to the outside of the firewall? When you put as DHCP, do you get an Valid IP address? Can you ping the ASA firewall?

Mike

[hugochengym]

Hi Mike

Sure I got a valid IP address from DHCP server and I can ping asa too

Hugo

[Maykol Rojas]

Would you please do a show version on the ASA?

Mike

[hugochengym]

Cisco Adaptive Security Appliance Software Version 8.4(1)
Device Manager Version 6.4(1)

Compiled on Mon 31-Jan-11 02:11 by builders
System image file is "disk0:/asa841-k8.bin"
Config file at boot was "startup-config"

firewall up 3 days 0 hours

Hardware:   ASA5505, 512 MB RAM, CPU Geode 500 MHz
Internal ATA Compact Flash, 128MB
BIOS Flash M50FW016 @ 0xfff00000, 2048KB

Encryption hardware device : Cisco ASA-5505 on-board accelerator (revision 0x0)
                             Boot microcode        : CN1000-MC-BOOT-2.00
                             SSL/IKE microcode     : CNLite-MC-SSLm-PLUS-2.03
                             IPSec microcode       : CNlite-MC-IPSECm-MAIN-2.06
                             Number of accelerators: 1

[praprama]

Hugo,

Have you configured your ASA as the DHCP server? Can you see any logs on the ASA for dropped traffic? you can also get captures on the ASA to see if packets are arriving and leaving the ASA:

https://supportforums.cisco.com/docs/DOC-1222

Regards,

Prapanch