cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2846
Views
0
Helpful
1
Replies

Can't ping/pass traffic through interfaces

efragoso220
Level 1
Level 1

Hi everyone. I just wanted to say thank you in advance for any help. I've just started a CCNA course and my lack of knowledge has me a bit stuck. My network is comprised of Cisco components and I'm semi familiar with them just from reading and looking through options. I currently am using a Cisco ASA 5520 on my network and I am trying to join another network via one of the interfaces. My network is 192.168.0.0 255.255.0.0 and my inside interface is 192.168.1.1 255.255.0.0. I enabled a second interface using a static ip of 10.0.0.1 with a subnet of 255.255.255.128. Connected to that interface, I have a Fortigate firewall at 10.0.0.2 255.255.255.128. I can ping just fine from the Fortigate network to the 10.0.0.1 interface on the Cisco ASA 5520 network, but I can not ping the 10.0.0.1 interface (or anything past it) on the ASA 5520 from any computer on the Cisco network. I've read that ACL's and NAT have to be done as well as enabling traffic between interfaces with the same security levels. (both interfaces have security levels of 100 and the option is checked to allow traffic). If anyone can point me to the right direction, it would be most appreciated. If an actual running config is needed, I will post.

Note: each network has it's own internet connection. The connection is to share information on servers on both networks with each other.

1 Reply 1

terrencepayet
Level 1
Level 1

Hi Erik,

The cisco ASA operates in two firewall modes:

Routed Firewall mode:

In routed mode, the ASA is considered to be a router hop in the network. It can use OSPF or RIP (in single context mode). Routed mode supports many interfaces. Each interface is on a different subnet. You can share interfaces between contexts.

Transparent Firewall mode:

A transparent firewall, is a Layer 2 firewall that acts like a "bump in the wire," or a "stealth firewall," and is not seen as a router hop to connected devices.

More info available @ http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/fwmode.html

HTH.

Regards,

Terence