06-19-2023 12:39 PM
Hello,
We have a weird issue here with a 3650 switch. We have it configured to give out dhcp addresses below are the details:-
Network:- 10.106.148.0 255.255.254.0 (/23)
default router: -10.106.148.2
Vlan 148:- ip:- 10.106.148.2 255.255.254.0
The issue is :- client who gets address assigned in the range of 148, works perfectly fine and can browse internet, but the clients who get's address assigned in the range of 10.106.149.0 cannot browse internet. Can you help?.
06-19-2023 04:32 PM - edited 06-19-2023 04:39 PM
asa(config)# policy-map global_policy asa(config-pmap)# class class-default asa(config-pmap-c)# set connection decrement-ttl
I run lab'
Why I ask tracer? The tracer give us hint what is path of traffic'
In asa you need above command to make asa appear in tracer.
If both path asa IP appear as second hop then issue in asa
If for .148 path the asa IP appear but the .149 path not appear then issue in Core SW.
06-20-2023 11:54 AM
So apparently, after adding these things to ASA and Core it looks like the whole subnet can now go out to internet now. I'll keep monitoring it. 1 or the other thing have worked, I'm thinking the route worked.
Added to ASA: static route 10.106.148.0 255.255.254.0 10.0.76.5
Added ACL to Core :-
access-list 148 permit icmp host 10.106.148.2 10.106.148.0 0.0.1.255
access-list 148 permit icmp 10.106.148.0 0.0.1.255 host 10.106.148.2
06-20-2023 12:01 PM - edited 06-20-2023 12:05 PM
S 10.106.148.0 255.255.254.0 [1/0] via 10.0.76.5, inside
Static route already config in asa
And for acl 148' I ask you and you confirm that it config not empty acl.
Anyway I am sure from what I see your config is correct (with 148 NOT empty one) will work fine
Have a nice day
MHM
06-20-2023 12:03 PM
Thanks.. initially the route in ASA was 10.106.148.0/24. I changed it to 10.106.148.0/23.
06-20-2023 12:08 PM
If it was /24 then it explain all issue you was face'
Change it to /23 sure correct.
And you are so welcome.
06-20-2023 11:58 AM
me know what you guys think might have helped.
Thanks
06-20-2023 12:09 PM
Thanks for all your help Team.. Will reach out if I have more issues..
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide