09-01-2016 03:57 AM - edited 03-12-2019 01:13 AM
Please Help. Not able to get the answer.
Using GNS3 with ASA 8.4 & ASDM 7.1.
Can ping from inside to outside but cannot ping from DMZ to Outside.
Cannot ping from outside to inside or DMZ.
Router on Outside interface is just to see whether ping packets are reaching or not ( using Debug ip icmp).
Using Virtual box to access ASDM on XP. So no configuration for Gigabit Ethernet Interface 03.
09-01-2016 05:12 AM
Very Simple by defualt trafic from lower security-level to higher security level not permit. As per your config
Outside security level 0
inside security level is 100
dmz security level 50
You have to add below command to allow traffic from same or lower security level to higher oe same security level interafce.
same-security-traffic permit inter-interface
Regards,
Pawan CCIE 52104
Kindly rate for useful post
09-01-2016 05:33 AM
Thank you.
But CCNA security exam require to configure these using ASDM only.
Can you tell me how to configure using ASDM.
NAT statements are in place. Referred some documents & CBT nuggets. But not able to ping.
Vishwa
09-01-2016 06:44 PM
When ping from PC 1 to R1 ( inside to outside ), Ping was successful with following debug output on ASA.
ciscoasa# ICMP echo request from inside:10.1.0.2 to outside:1.2.3.4 ID=27351 seq=1 len=56
ICMP echo request translating inside:10.1.0.2 to outside:1.2.3.10
ICMP echo reply from outside:1.2.3.4 to inside:1.2.3.10 ID=27351 seq=1 len=56
ICMP echo reply untranslating outside:1.2.3.10 to inside:10.1.0.2
When Ping from PC 2 to R1 ( dmz to outside ), 1.2.3.4 icmp_seq=1 timeout observed with debug output on ASA.
ciscoasa# ICMP echo request from dmz:172.16.0.2 to outside:1.2.3.4 ID=48344 seq=1 len=56
ICMP echo request translating dmz:172.16.0.2 to outside:1.2.3.10
ICMP echo reply from outside:1.2.3.4 to inside:1.2.3.10 ID=48344 seq=1 len=56
ICMP echo reply untranslating outside:1.2.3.10 to inside:10.1.0.2
Not able to make out why the untranslation going to 10.1.0.2 instead of 172.16.0.2
Regards
Vishwa
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide