cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2573
Views
5
Helpful
2
Replies

No Internet access - ASA 5505

Simon.peters1
Level 1
Level 1

Hi all,

I am missing something really stupid here I think, I have an asa 5505 running 9.1 software, I am trying to use BT infinity broadband with it using an openreach modem connected on port 0. I have tested a direct connect with the openreach modem and the laptop using a pppoe connection and it connects and I can browse the internet ok.

The only changes I have made to the factory config is below, the ASA can ping google DNS but my laptop cannot get out to the internet.

I know it is a route issue but I cannot figure out what i need to change. I do not have a static IP from BT so I have left it to ip address pppoe

Do i need to add a route outside? I have tried this but when I know the ip address the openreach picks up the route outside command fails with "Invalid next hop address, it belongs to one of our interfaces"

The only changes made to factory config is below.

!
hostname ASA-HOME
enable password *****
passwd *****
names
!
username Test password ****** privilege 15
!
interface Ethernet0/0
switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
vpdn group BT request dialout pppoe
vpdn group BT localname bthomehub@btbroadband.com
vpdn group BT ppp authentication chap
vpdn username bthomehub@btbroadband.com password ****
!
interface Vlan1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
!
interface Vlan2
nameif outside
security-level 0
pppoe client vpdn group BT
ip address pppoe
!
dhcpd dns 8.8.8.8 8.8.4.4
!
icmp permit any inside
!
icmp permit any outside
!

I am being stupid here but I can't see why I can't add the static route, I have tried to add "ip address pppoe setroute" but I then get an error of no route to host when trying to ping 8.8.8.8 from the ASA.

Any help would be appreciated.

Thanks!

1 Accepted Solution

Accepted Solutions

Seb Rupik
VIP Alumni
VIP Alumni

Try the following:

!
object network OBJ-net-inside
subnet 192.168.1.0 255.255.255.0
nat(inside,outside) dynamic interface
!

cheers,

Seb.

View solution in original post

2 Replies 2

Seb Rupik
VIP Alumni
VIP Alumni

Try the following:

!
object network OBJ-net-inside
subnet 192.168.1.0 255.255.255.0
nat(inside,outside) dynamic interface
!

cheers,

Seb.

Thank you very much!

All working!

One question, when connecting to an asa on putty how to you assign a username?

Thanks!