cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Bookmark
|
Subscribe
|
582
Views
0
Helpful
4
Replies

ASA Setup Help

Ayan0chk0
Level 1
Level 1

Hi everyone,

I just had a configuration question regarding a 5506-X ASA in packet tracer. I can't ping the router connected to the ASA. Everything is sub-netted properly to my knowledge and the interface Gig0/1 on the router has an address of 10.210.200.1/28, the Gig1/1 on the ASA is 10.210.200.17/28. I'll include a screenshot of my topology as well as my running config on the ASA. I feel like I'm missing something simple so any help would be appreciated.

Ayan0chk0_0-1701551544342.png

ASA Version 9.6(1)

!

hostname Remote-ASA

names

!

interface GigabitEthernet1/1

nameif OUTSIDE

security-level 100

ip address 10.210.200.17 255.255.255.240

!

interface GigabitEthernet1/2

nameif INSIDE

security-level 100

ip address 10.210.200.33 255.255.255.240

!

interface GigabitEthernet1/3

nameif ADMIN

security-level 100

ip address 10.210.200.49 255.255.255.240

!

interface GigabitEthernet1/4

no nameif

no security-level

no ip address

shutdown

!

interface GigabitEthernet1/5

no nameif

no security-level

no ip address

shutdown

!

interface GigabitEthernet1/6

no nameif

no security-level

no ip address

shutdown

!

interface GigabitEthernet1/7

no nameif

no security-level

no ip address

shutdown

!

interface GigabitEthernet1/8

no nameif

no security-level

no ip address

shutdown

!

interface Management1/1

management-only

no nameif

no security-level

no ip address

shutdown

!

object network ADMIN-NET

subnet 10.210.200.48 255.255.255.240

nat (ADMIN,OUTSIDE) dynamic interface

object network INSIDE-NET

subnet 10.210.200.32 255.255.255.240

nat (INSIDE,OUTSIDE) dynamic interface

!

route OUTSIDE 0.0.0.0 0.0.0.0 10.210.200.1 1

!

access-list icmp_traffic extended permit icmp any any echo-reply

!

!

!

!

class-map inspection_default

match default-inspection-traffic

!

policy-map type inspect dns preset_dns_map

parameters

message-length maximum 512

policy-map global_policy

class inspection_default

inspect dns preset_dns_map

inspect ftp

inspect icmp

inspect tftp

!

service-policy global_policy global

!

telnet timeout 5

ssh timeout 5

!

!

!

!

4 Replies 4

interface GigabitEthernet1/1

nameif OUTSIDE

security-level 0

 

Change the secuirty level of outside to be 0 not 100

 

MHM

MHM,
I changed the security level of  GigabitEthernet1/1 and still can't ping from the ASA to the router. Is there something else it could be?

Ping from pc connect to asa to router not from asa. 

Or use 

Asa#ping

Then select source interface, which must be  IN.

MHM

Review Cisco Networking for a $25 gift card