I have no clue what happened but none of it posted. Here's the post:
Hi everyone. First time posting as I'm just stuck. My router/firewall skills are weak at best so I'm hoping for some insight. We are coming from a Cisco 5510 to Cisco 5508-x. Both are connected to the same downstream layer 3 switch. I cannot for the life of me get routing figured out. The Cisco 5508 attaches to a switch with a default gateway of 10.10.10.154 which is the inside interface of the old cisco 5510. There is also a static route to the new Cisco 5508 (172.16.1.10)inside interface for a vlan I'm trying to route. Config is below but all I'm trying to do is get 172.16.30.0 network to route out public IP of 68.133.87.40 which is part of a block on Interface/1 on the cisco 5508. What i have configured here doesn't allow any traffic to pass. Logs show tcp connect messages and then it ends with 0 syn timeout after 30 seconds. So what am I doing wrong? Thanks for any help!
ASA Version 9.10(1)
interface GigabitEthernet1/1
nameif outside
security-level 0
ip address 68.133.87.34 255.255.255.0
!
interface GigabitEthernet1/2
nameif inside
security-level 100
ip address 172.16.1.10 255.255.255.0
interface GigabitEthernet1/3
nameif DMZ1
security-level 75
ip address 192.168.2.1 255.255.255.0
no asdm history enable
arp timeout 14400
arp permit-nonconnected
arp rate-limit 16384
nat (inside,outside) source static CTX_VLAN30 CTX_Servers_Edge
object network obj_any
nat (any,outside) dynamic interface
access-group outside_access_in in interface outside
access-group inside_access_in in interface inside
access-group pacs_access_in in interface DMZ1
route outside 0.0.0.0 0.0.0.0 68.133.87.1 1
route inside 172.16.30.0 255.255.255.0 172.16.1.11 1
