cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
332
Views
0
Helpful
1
Replies

Inbound traffic being blocked

mikef
Level 1
Level 1

I have an ASA5510 with 8.3 and a Cisco PIX525 (retiring). The ASA was for VPN traffic only while the PIX was for all other Internet traffic. I'm trying to move all the traffic to the ASA5510 so I used the PIX to ASA migration tool. I migrated the PIX rules over to the ASA5510, however we can't receive email and there is no external access to our internal websites. But the VPN connections remain intact and internal users can get out to the internet.

When I run Packet Tracer on my outside (incoming rules) the packets are dropped at the inside interface. What am I missing

packettrcr.bmp

1 Reply 1

Julio Carvajal
VIP Alumni
VIP Alumni

Hello Mike,

Packet-tracer needs to point to the public Ip address of those internal servers,

Try it like that and post the packet-tracer output,

Regards,

Julio

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card