ā01-16-2024 05:18 AM
can someone help me,i configure 2 cisco firepower 1010,1 for router and the other for firewall,i can get internet from router device when i plug the rj45 to router,but i cant get internet when i do to firewall,please help me,thank you
Solved! Go to Solution.
ā01-21-2024 08:12 AM
first of all,thank you for @MHM Cisco World helping and reach out the problem, i already solve the problem,im disable one of nat that cause the problem,
outside to firewall 0.0.0.0/0(objamz) to objsrcnet(to one of the host),i cant put the ip
ā01-16-2024 06:32 AM
Friend I dont know how you use 192.168.1.0 to access internet' this IP is private IP and not accept in Interent public IP.
MHM
ā01-16-2024 06:39 AM
Its from isp and the isp distribute it to private ip
ā01-16-2024 06:44 AM
Ok'
Then ISP know only 192.168.1.0 subnet' all other subnet behind Router FW dont know it.
You need then NAT in router FW
note you need acl permit any any from inside zone to outside zone.
MHM
ā01-16-2024 07:03 AM
I already give nat and acl, you can see the document that i attach, the is problem when i ping 8.8.8.8 from the cisco firepower 1010(works as firewall) it "request time out" And cant get internet
ā01-16-2024 08:59 AM
let start with FW (router)
you config two interface and I see three ZONE ??
can you more elaborate named the interface and zone you use in FW (router)
thanks
MHM
ā01-16-2024 06:32 PM
okey sir,
FW(router) security zone
toswitch eth2,inside vlan1,outside eth1
ā01-16-2024 08:32 PM
from your topology there are two link in FW (router) one to FW and other to internet ?
you need to specify the exact interface and zone in your NAT and ACL
MHM
ā01-16-2024 11:12 PM
ā01-17-2024 09:22 AM
I think it easy for both to clarify it in topology
since I see LAN and toSwitch and OUTside and I dont get for which this interface use
ā01-21-2024 08:12 AM
first of all,thank you for @MHM Cisco World helping and reach out the problem, i already solve the problem,im disable one of nat that cause the problem,
outside to firewall 0.0.0.0/0(objamz) to objsrcnet(to one of the host),i cant put the ip
ā01-21-2024 08:20 AM
you are so welcome friend
have a nice day
MHM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide