Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi All,I am configuring the Cisco ASA to allow the Internal network to access external web which is run by the router at Cisco B as shown in the diagram below. I run the web server from the router using ip http server.interface g0/0ip address 192.16...
I am trying to configure the ASA to allow the External Network to access web service provided by DMZ web server which is on the DMZ network. Above is my network diagram.In My ASA configuration.route 0.0.0.0 0.0.0.0 next hop routerinterface e0/0nameif...
Hi All,I am performing configuration to achieve site to site VPN between Cisco ASA and Cisco Router. I want to allow the external or outside network to access the Internal network.I configure the ASA interface, route, ikev1 policy and enable it on t...
I am trying to configure the ASA to allow the Internal Network to access web service provided by DMZ web server which is on the DMZ network. Above is my network diagram.In My ASA configuration. interface e0/0nameif insidesecurity-level 100192.168.20....
@Rob Ingram ,the access worked. there is some issue in the asa. i have resetted the ASA device and redo the configuration.it is working.For the NAT configuration, is there a difference between your and mine?nat (inside,outside) after-auto source dyna...
@Rob Ingram ,It did not work when I accessed the web ip from the browser. 209.170.200.225the command you provide is not applicable for the NATI typed this command, nat (inside,outside) after-auto source dynamic any interface the output of the packet...
@Rob Ingram ,I have recorrect-ed access-list 12 and allow any host to access.Yes routing is set up on the routers and ASA. They are configured as 0.0.0.0 0.0.0.0 to the next hop interface.ASA can ping 209.170.200.225.Is the NAT configuration wrong?
@Rob Ingram , yes this is my lab and I have updated the diagram for a more clearer explanation. Assuming if you mention that the IP need to be a public ip in order to be routable from the outside network. Then the interface should be 209.150.150.225....
@Rob Ingram , I configure the NAT under the dmz-server. I configure the interface to be the same as the External device IP.It did not work. route 0.0.0.0 0.0.0.0 next hop routerinterface e0/0nameif outsidesecurity-level 0192.168.20.5 255.255.255.0int...
