cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1224
Views
0
Helpful
13
Replies
Joe Carey
Beginner

Cisco ASA static routing to Cisco 831. help with ACL maybe?

Hi all,

 

What should be a simple task is proving to be difficult and I really need some help.

 

The Cisco ASA is obviously not a strong point on mine and could do with a point in the right direction. Hopefully this will allow me to learn more about the ASA 5505.

 

 

Ok so I have an ASA 5505. Vlan 1 is 192.168.254.1 and VLAN 2 is DHCP from my cable modem.

I have a cisco 831 Ethernet router which will sit between my main LAN and my test LAN which I am setting up for multicast. the Cisco 831 has Ethernet 1 as 192.168.254.254 and the Ethernet 0 is 10.1.1.1.

 

On the ASA I have an inside route of 10.0.0.0 255.0.0.0 192.168.254.254.

On the Cisco 831 there is a route of 0.0.0.0 0.0.0.0 192.168.254.1. I can pass traffic through the Cisco 831 to the ASA 5505 and out to the internet, I can ping 8.8.8.8 for example and access everything on my main lan, but the other wan from any host inside the ASA 5505 is unable to ping anything on 10.1.1.x.

Where am I going wrong? I made all my access of my ASA any any, but still it is unable to do anything.

I will attached my configs here with the passwords removed and would appreciate a good kick in the right direction. No doubt this is something simple that I am missing and I am sure it is with the ACL on the ASA 5505 as the packet tracer says the packet is dropped because of the ACL

 

Thanks. :)

 

 

2 ACCEPTED SOLUTIONS

Accepted Solutions

So, on ASA, all the traffic between these two LANs will traverse on the same interface.
Then please add this command in the global config on ASA:
same-security-traffic permit intra-interface

View solution in original post