08-11-2010 06:59 AM - edited 03-09-2019 11:06 PM
08-11-2010 07:11 AM
Your 2 NAT statements confuse me.
You will need a global and a NAT for translating your private to public IPs-
global (Outside) 1 interface
nat (Inside) 1 0 0
Check your logs, they usually tell you what is happening. The packet trace is also very helpful.
08-11-2010 07:13 AM
Also, your Inside_access_in ACL is only allowing HTTP out. You will need at least DNS too. Your Outside_access_in ACL is allowing all internet traffic in!
08-11-2010 08:36 AM
Thanks for your help Colin.
I am using the Cisco ASDM 6.3 for ASA configuration and it seems like 2 statement below
global(outisde) 1 interface
nat (inside) 1 0 0
is no longer configured in that format. And it seems the only way I could configure the above is by using the below statement.
nat (Inside,Outside) source dynamic any interface
nat (any,any) source dynamic Internet Internet
I will look into this again and also allow for DNS
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide