06-18-2007 09:04 AM - edited 03-09-2019 06:13 PM
I recently migrated our firewall from pix 6.3 to asa 5510. After the migration only the users having ip address 10.100.0.x can connect to the internet except the others having the IP address 10.100.1.x and 10.100.2.x. Everything else works fine as before. I copied most of the config including nat and accesslist from the previous config. What could be possible causes of this problem?
06-18-2007 11:52 AM
Hi
If possible could you send a copy of ASA config minus any sensitive info.
Jon
06-19-2007 05:24 AM
check that you can ping a host in each of your subnets from the ASA.
make sure you have the correct NAT statements to allow all internal networks access to the 'net.
06-19-2007 05:32 AM
check the subnet mask in the NAT statement & ensure that it convers all the subnets.
The subnet from where you are browsing - It may not be under the NAT / subnet mask may be wrong.
06-21-2007 08:34 PM
Thanks for all the responses. I found that inside interface was setup with 24 bit netmask instead of 16 bit. After I changed the subnet mask, its working now.
06-21-2007 08:40 PM
I am glad we were able to help you in resolving your issue.
Please rate useful posts.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide