ASA5505 can reach internet but local hosts cannot.

[msims]

ASA 5505.

From the console, can ping internet hosts.

Can reach the ASA from the LAN.

LAN hosts cannot reach the web.  I figure this is something to do w NAT but NAT and permissions are all set.  What is wrong?

Web connection is DSL / PPPOE.  I figure the PPPOE is pulling IP correctly since we can reach the web from the ASA.

Will attach SH RUN shortly.

[msims]

sh run attached

[Nagaraja Thanthry]

Hello,

What is the DNS server address? Can you try using 4.2.2.2 and see if that helps? If that did not work, please try the following:

access-list outside_access_in permit icmp any any echo-reply

access-group outside_access_in in interface outside

icmp permit any outside

Hope this helps.

Regards,

NT

[msims]

Wonderful!  Tried two different dns servers thinking that was the issue but I guess both were failing.  And allowed the ICMP replies in and now pings can respond fine to the router or to internal hosts.  So simple sometimes!

Thank you!
-mike