Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Been a while since I configured an ASA. it's a
Hardware: ASA5515, 8192 MB RAM, CPU Clarkdale 3059 MHz, 1 CPU (4 cores):ASA Version 9.9(2)
I got the outside configured ok. I can ping out. I can ping switches internal. I have anyconnect working...
I was using the ASDM to configure a Cisco 5515, but when I tried to enable ICMP, it told me I wasn't allowed when IPv6 was enabled on the interface. IPv6 was not enabled on the interface, and when I did the rule via cli, it took it with no issue.
A...
I have an ASA 5505 running 9.1. I have the VPN tunnel connecting, but I'm not able to pass traffic. through the tunnel. pinging through to the internet is working fine. here is my config LN-BLF-ASA5505> enPassword: *******LN-BLF-ASA5505# sho run: S...
Okay, I was able to get to a host on the inside for testing.
I am able to get to the internet from the host, so I guess Nat is working.
So, I'm guessing my ping from the ASA inside is being blocked, although the rule to allow is there.
tcts-FW-01# sho asp drop
Frame drop: NAT-T keepalive message (natt-keepalive) 50 Invalid TCP Length (invalid-tcp-hdr-length) 1 No route to host (no-route) 13483 Flow is denied by configured rule (acl-drop) 16427 No same-security-traffic configured (n...
ahh...it was stopping at the ACL's. changed the xlate statements below to permit, and the packets started going through xlate per-session permit tcp any4 any4xlate per-session permit tcp any4 any6xlate per-session permit tcp any6 any4xlate per-sessi...
made the following changes, but still having the same issueobject network obj_any subnet 0.0.0.0 0.0.0.0object-group network LNC_Local_TX_Nets description Lopez Negrete Internal Networks (Texas) network-object 192.168.1.0 255.255.255.0 network-object...