02-08-2017 02:19 AM - edited 03-08-2019 09:14 AM
Dear Team,
I have created sub interfaces on an ASA 5510,i have to route one subinterface traffic to the outside interfcae to access the internet,i tried to create the route to pass traffic from that subinterface to the outside interface.But its states that we can not create route for the interfaces.Could you please help me that how we can pass traffic to outside interface to access internet.I am new to firewall.Please help me to figure out the problem.
02-08-2017 02:24 AM
Hi
You should to have something like:
route OUTSIDE 0.0.0.0 0.0.0.0 150.x.x.x
Also you should enable a NAT (the configuration depends on the version 8.3+) remember to create the acccess-group for the sub-interfaces for example:
access-group INSIDE in interface inside
Could you please share your configuration o error message?
Thanks.
02-08-2017 03:42 AM
Dear Juloi,
My scenario is like that we have 3 physical interfaces on firewall , Outside,Inside and Others.In the physical interface "others" we have created 3 sub interfaces.192.168.0.x,192.168.1.x,192.168.3.x.
In our case we have to give internet access to the sub interface 192.168.3.x.Currently "inside" interface have access to the "outside" which means they can access internet.
is it possible to create route for the interfaces,while trying to create route for the interfaces it states that for the same interfaces no need to create route.
I want to pass my 192.168.3.x network (which belongs to users) traffic to the "outside" interface for internet access
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide