Replace a "Cisco 2801" with a "Cisco ASA 5508-x"

[aandewegr]

Dear All,

I'm getting a bit stuck with the following configuration and I hope someone can help me.

The configuration in the currently added drawing (See attachment) works properly but the following needs to be adjusted. The router in the top right (2811: xxx.xxx.xxx.xxx) must be replaced with a Cisco ASA 5508-x but I can't get a base ping to 134.xxx.xxx.xxx going wrong!

Who can help me.

Thank you in advance for your effort.

Best Regards,
Remco

[AndreaTornaghi]

Dear,

I think that you are using the wrong next hop on your default route.

I suggest you to change it in 134.222.138.97.

Best Regards

[aandewegr]

This is an International (Belgium - Netherlands) EVPN connection via multiple ISPs of which I cannot change the configuration. The problem is that the 0.0.0.0 route must go to 134.222.129.41 because the other networks are located there.

[Deepak Kumar]

Hi,

Change your default route:

ip route 0.0.0.0 0.0.0.0 134.222.138.97

Regards,

Deepak Kumar

[aandewegr]

This is an International (Belgium - Netherlands) EVPN connection via multiple ISPs of which I cannot change the configuration. The problem is that the 0.0.0.0 route must go to 134.222.129.41 because the other networks are located there.

[Deepak Kumar]

Hi,

Thanks for make some point more clear. Share some output and ASA configuration as

Show route

Regards,

Deepak Kumar

[aandewegr]

HI,

I attached two files

1. Working Config_RTR.txt

2. NOT working Config_ASA.txt

I'm not in the office right now so i can not output "Show route" at this moment.

[Deepak Kumar]

Hi,

You are missing NAT configuration as below:

interface FastEthernet0/1.1
description Uplink to Management Network (Vlan 1 - Native)
encapsulation dot1Q 1 native
ip address 192.168.32.1 255.255.255.0
IP nat inside
!
interface FastEthernet0/1.70
description Uplink to LAN (VLAN 70)
encapsulation dot1Q 70
ip address 192.168.70.1 255.255.255.0
ip helper-address 192.168.70.254
IP nat inside
!
interface FastEthernet0/0
description Uplink to ISP_BELGIUM
ip address 134.222.138.98 255.255.255.252
ip nat outside
duplex full
speed 100
no shut
!
IP access-list standard 1
10 permit 192.168.70.0 0.0.0.255
20 permit 192.168.32.0 0.0.0.255
!
ip nat inside source list 1 interface FastEthernet0/0 overload
!

Regards,

Deepak Kumar