cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2245
Views
5
Helpful
2
Replies

Problem with ASA packet tracer

TreCani
Visitor

Hi everybody,  i'm trying to config my ASA 5505. But it drop both icmp packets and telnet connection from allowed host, also after i've created an access-list... i post the asa running conf:

 

names

!

interface Ethernet0/0

switchport access vlan 2

!

interface Ethernet0/1

!

interface Ethernet0/2

!

interface Ethernet0/3

!

interface Ethernet0/4

!

interface Ethernet0/5

!

interface Ethernet0/6

!

interface Ethernet0/7

!

interface Vlan1

nameif inside

security-level 100

ip address 192.168.1.1 192.168.1.0

!

interface Vlan2

nameif outside

security-level 0

ip address 192.168.255.2 255.255.255.252

!

!

route inside 192.0.0.0 255.0.0.0 192.168.1.5 1

route outside 0.0.0.0 0.0.0.0 192.168.255.1 1

!

access-list OUTSIDE extended permit tcp host 172.16.0.1 any eq telnet

access-list OUT-IN extended permit icmp any any

!

!

telnet timeout 5

ssh timeout 5

!

dhcpd auto_config outside

!

dhcpd address 192.168.1.5-192.168.1.36 inside

dhcpd enable inside

 

I also show you the result with a ping of a host inside

Cattura1.PNG

 

Thank you for your help

1 Accepted Solution

Accepted Solutions

Bogdan Nita
VIP Alumni
VIP Alumni

I believe you did not apply the created acls to the outside interface, in order to do that for the OUT-IN acl you would need to enter the following command:

access-group OUT-IN in interface outside

 

HTH

Bogdan

View solution in original post

2 Replies 2

Bogdan Nita
VIP Alumni
VIP Alumni

I believe you did not apply the created acls to the outside interface, in order to do that for the OUT-IN acl you would need to enter the following command:

access-group OUT-IN in interface outside

 

HTH

Bogdan

Hi Bodgan;

thank you so much!!
Review Cisco Networking for a $25 gift card