cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
278
Views
0
Helpful
2
Replies

ASA5505 - No internet access from Inside to Outside

kxv_vermilk
Level 1
Level 1

First, I have little to no knowledge of firewalls and these types of devices.

I did folllow the setup wizard and everything appears to be fine at the completion.  However; something is not correct or missing.  I have no internet access when connected to this device.  I cannot ping or run a tracert in addition to no internet access.

I have noticed several different messages in the log as I attempt each of the above commands.

Here are a few of the messages:

- Failed to locate egress interface for UDP from inside...

- Routing failed to locate the next hop for ICMP from NP Identity....

- Deny TCP (no connection) from 192.168.1.6/2899 to 192.168.1.1/443...

I have provided my config.  It looks pretty basic to me with no big options.

Thanks for any help!

Kevin

1 Accepted Solution

Accepted Solutions

jebose
Level 1
Level 1

Hi Kevin,

The dafault route us missing from config.

with the below config i am sure that you have a static ip address from isp.

------------------

interface Vlan2

nameif outside

security-level 0

ip address 173.190.xxx.xxx 255.255.255.252

-----------------

we need to add a default route to the next hop unit(isp unit).

for eg --  route outside 0 0 173.190.x.x  1     // we specifying that unknown destination based traffic should be left to next hop 173.190.xx.xx.

Let me know how it goes.

Regards,

Jesu Kumar Bose

View solution in original post

2 Replies 2

jebose
Level 1
Level 1

Hi Kevin,

The dafault route us missing from config.

with the below config i am sure that you have a static ip address from isp.

------------------

interface Vlan2

nameif outside

security-level 0

ip address 173.190.xxx.xxx 255.255.255.252

-----------------

we need to add a default route to the next hop unit(isp unit).

for eg --  route outside 0 0 173.190.x.x  1     // we specifying that unknown destination based traffic should be left to next hop 173.190.xx.xx.

Let me know how it goes.

Regards,

Jesu Kumar Bose

OK, so I feel stupid.

Thanks a bunch for the help Jesu!

Review Cisco Networking products for a $25 gift card