cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
539
Views
0
Helpful
3
Replies

Trouble connecting to Internet outside interface on asa5520

JodyPetroni
Level 1
Level 1

Hi Community

I have just purchased a ASA5520 Firewall for a home lab I am trying to set up.

Here is the config : -

This is the config for the outside interface

int g0/0 

nameif Outside ip address 192.168.2.116 255.255.255.0

no shutdown

Description WAN Interface

Here are the routes configured

C 192.168.2.0 255.255.255.0 is directly connected, outside
S* 0.0.0.0 0.0.0.0 [1/0] via 192.168.2.1, outside

The ASA5520 is connected to an EdgePro Router wich is connected to my ISP. The address of the Router is 192.168.2.1. I cant ping the internet from the ASA5520. The ASA5520 is connected directly to an interace (eth3) on the router.I suspect I am missing something on the EdgeProRouter?

Can someone please assist 

Thanks

1 Accepted Solution

Accepted Solutions

I don't have any experience with this router, but I am sure you can find it online, here is one example : https://help.ui.com/hc/en-us/articles/204976494-EdgeRouter-Source-NAT-and-Masquerade

you also have option to configure public IP on outside interface of the firewall itself and use NAT on ASA itself. Since this is your home Lab, I am sure you have a single public IP from ISP.

-hope this helps-

View solution in original post

3 Replies 3

ammahend
VIP Alumni
VIP Alumni

Can you ping the gateway (edge pro router) from ASA ?

can you ping internet from edge pro ?

do you have nat configured on edge pro router ? You can’t ping the internet using a private IP.

-hope this helps-

No I cant ping gateway from ASA

Yes can ping internet from edge pro

What do I do to have nat configured on the edge Pro Router

I don't have any experience with this router, but I am sure you can find it online, here is one example : https://help.ui.com/hc/en-us/articles/204976494-EdgeRouter-Source-NAT-and-Masquerade

you also have option to configure public IP on outside interface of the firewall itself and use NAT on ASA itself. Since this is your home Lab, I am sure you have a single public IP from ISP.

-hope this helps-