ASA Setup Help
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-02-2023 01:17 PM
Hi everyone,
I just had a configuration question regarding a 5506-X ASA in packet tracer. I can't ping the router connected to the ASA. Everything is sub-netted properly to my knowledge and the interface Gig0/1 on the router has an address of 10.210.200.1/28, the Gig1/1 on the ASA is 10.210.200.17/28. I'll include a screenshot of my topology as well as my running config on the ASA. I feel like I'm missing something simple so any help would be appreciated.
ASA Version 9.6(1)
!
hostname Remote-ASA
names
!
interface GigabitEthernet1/1
nameif OUTSIDE
security-level 100
ip address 10.210.200.17 255.255.255.240
!
interface GigabitEthernet1/2
nameif INSIDE
security-level 100
ip address 10.210.200.33 255.255.255.240
!
interface GigabitEthernet1/3
nameif ADMIN
security-level 100
ip address 10.210.200.49 255.255.255.240
!
interface GigabitEthernet1/4
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/5
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/6
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/7
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/8
no nameif
no security-level
no ip address
shutdown
!
interface Management1/1
management-only
no nameif
no security-level
no ip address
shutdown
!
object network ADMIN-NET
subnet 10.210.200.48 255.255.255.240
nat (ADMIN,OUTSIDE) dynamic interface
object network INSIDE-NET
subnet 10.210.200.32 255.255.255.240
nat (INSIDE,OUTSIDE) dynamic interface
!
route OUTSIDE 0.0.0.0 0.0.0.0 10.210.200.1 1
!
access-list icmp_traffic extended permit icmp any any echo-reply
!
!
!
!
class-map inspection_default
match default-inspection-traffic
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect icmp
inspect tftp
!
service-policy global_policy global
!
telnet timeout 5
ssh timeout 5
!
!
!
!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-02-2023 01:20 PM
interface GigabitEthernet1/1
nameif OUTSIDE
security-level 0
Change the secuirty level of outside to be 0 not 100
MHM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-02-2023 06:41 PM
MHM,
I changed the security level of GigabitEthernet1/1 and still can't ping from the ASA to the router. Is there something else it could be?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-02-2023 06:45 PM
Ping from pc connect to asa to router not from asa.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-02-2023 06:48 PM
Or use
Asa#ping
Then select source interface, which must be IN.
MHM
