Initial ASA 5505 setup

[radioflyer1]

First I have to admit I am new to CISCO ASA devices so please bear with me.

I have a new Cisco ASA 5505 which I am trying to just setup so that all computers on the LAN can get to the internet (browsing and ping). My current setup attached. Any help to get me on the right track would be appreciated.

[Anu M Chacko · Accepted solution]

Hi Ry,

For in to out traffic, you need to configure NAT as follows:

no global (inside) 1 172.168.1.2-172.168.1.50 netmask 255.0.0.0

global (outside) 1 outside

The second command will PAT traffic to the outside interface. In the first command that you've configured, the traffic is being NAT-ed to a set of private IP addresses,  which is not routable over the Internet. If you dont want to use the second command, you can give a public range of IP addresses in the same subnet as that of the outside interface.

For pings, allow the return traffic  as follows:

access-list inside_access_out extended permit icmp any any echo-reply

Hope this helps!

Regards,

Anu

P.S. Please mark this question as resolved if it has been answered. Do rate helpful posts.