internet access issue trough ASA

[Miguel Ortega]

Dear All

I have a ASA (9.1) where users can Access to internet, default Gateway is a L3 catalyst, behind that catalyst and i have another router and i need to give internet Access to them also,  ping is ok from their network but they can´t Access to any web, for instance they can ping to www.youtube.com but web can´t load on their browsers

ASA -----L3 (Gateway)-----router------users network

On Asa i have configurated tcp by pass option for users network but there is no difference.

thanks in advance for any help

Miguel Ortega

[Vibhor Amrodia]

Hi,

Do you have the correct configuration on the ASA device ? Did you check the DNS settings ?

Can you share the configuration from the device ?

Thanks and Regards,

Vibhor Amrodia

[Miguel Ortega]

DNS settings are OK, i am not pretty sure about configuración because i have not a lot of experience with ASA

attached i am sending the configuration

thanks

[Vibhor Amrodia]

Hi,

Can you try to run this tracer on the ASA device to verify the rules:-

packet input LAN tcp <IP address of the machine that you are trying to access the website from> 3456 4.2.2.2 80 det

Thanks and Regards,

Vibhor Amrodia

[jadesha.jeer1]

Hello Miguel,

I have checked your asa configuration, looks to be there is no PAT configured for any internet traffic from your LAN network.

Try below config:

object network <NAME>

subnet <local LAN user network>
 nat (LAN,Internet) dynamic interface

This will work.. :)

Thanks- Jadesh