Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About nmandal01
Stats
Member since
09-10-2014
4
Posts
0
Helpful
0
Solutions
09-12-2014
04:35 PM
Hi Lately internet browsing from my LAN network has become very very slow. So I ran a wireshark to see if there is any problem on my LAN network and realize lot of ARP broadcast is going on . (attach is the screenshot) . with destination and source address as 00:00:00:00 Something doesn't look right can someone please help me what it could be. and what area should I be looking at?
... View more
- Tags:
- #ARP
Labels:
09-12-2014
03:22 PM
Thanks for your help , I have done the changes and its seems to work fine . This is still in testing environment . Till I get everything check I will not put it in production. Next task is to add Domain detail and I will need your expertise if I ran into any issue. Thanks,
... View more
09-11-2014
03:20 PM
Thanks you all for your answer really appreciate . I realize the problem was with my DNS service which I have created. I have created DNS object by service type TCP and des and source port as 53. After change it to TCP-UDP and source port as 1-65535 and des port 53 it worked. -----However I still want you to verify my access list as I don't want any mistake before I put it in my production environment--- Below is my access list detail, ----------------- ASA# show access-list access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096) alert-interval 300 access-list Outside_access_in; 1 elements; name hash: 0xe796c137 access-list Outside_access_in line 1 extended deny ip any any (hitcnt=121) 0xde833d65 access-list Inside_access_in; 11 elements; name hash: 0xa231c4d3 access-list Inside_access_in line 1 extended permit object-group DM_INLINE_SERVICE_1 192.168.10.0 255.255.255.0 any (hitcnt=616) 0x4e62a006 access-list Inside_access_in line 1 extended permit tcp 192.168.10.0 255.255.255.0 any eq www (hitcnt=432) 0x86f0eeae access-list Inside_access_in line 1 extended permit udp 192.168.10.0 255.255.255.0 any eq www (hitcnt=0) 0xee7036b8 access-list Inside_access_in line 1 extended permit tcp 192.168.10.0 255.255.255.0 any eq https (hitcnt=184) 0x7fb7fc68 access-list Inside_access_in line 2 extended permit object-group TCPUDP 192.168.10.0 255.255.255.0 object-group DNShost eq domain 0x936d8b0a access-list Inside_access_in line 2 extended permit udp 192.168.10.0 255.255.255.0 host 8.8.8.8 eq domain (hitcnt=41) 0x8cc0baaa access-list Inside_access_in line 2 extended permit udp 192.168.10.0 255.255.255.0 host 8.8.4.4 eq domain (hitcnt=0) 0x4eec758c access-list Inside_access_in line 2 extended permit udp 192.168.10.0 255.255.255.0 host "ISP DNS" eq domain (hitcnt=0) 0x29de795b access-list Inside_access_in line 2 extended permit tcp 192.168.10.0 255.255.255.0 host 8.8.8.8 eq domain (hitcnt=0) 0xa2b2b070 access-list Inside_access_in line 2 extended permit tcp 192.168.10.0 255.255.255.0 host 8.8.4.4 eq domain (hitcnt=0) 0xb92c3a21 access-list Inside_access_in line 2 extended permit tcp 192.168.10.0 255.255.255.0 host "ISP DNS" eq domain (hitcnt=0) 0x31c37630 access-list Inside_access_in line 3 extended permit icmp object Admin any (hitcnt=0) 0xe5422aa2 access-list Inside_access_in line 3 extended permit icmp host 192.168.10.2 any (hitcnt=62) 0xe5422aa2 access-list Inside_access_in line 4 extended deny ip any any (hitcnt=0) 0x51fd3ce2 ASA# ------- I simply want my internet network to access internet http/https . and DNS for specific host eg google DNS/ISP dns / and my PC which is 192.168.10.2 to do ICMP. Thanks for help in advance.
... View more
09-10-2014
04:25 PM
I am very new to firewall but really want to understand it on depth so after searching for couple of site I am here to get help from the expert. I am trying to build ASA 5510 firewall and want to make sure everything is correct.. I want to setup Access list just to allow my internal user to access internet . For that I created a access group with the services Https/http/dns/ all the traffic outside . But by this rule internet doesn't work till i include IP protocol on it . How can I achieve this?
... View more
- Tags:
- #asa #firewall
Labels:
09-12-2014
HiLately internet browsing from my LAN network has become very very
slow. So I ran a wireshark to se...
09-12-2014
Thanks for your help , I have done the changes and its seems to work
fine . This is still in testing...
09-11-2014
Thanks you all for your answer really appreciate .I realize the problem
was with my DNS service whic...
Public Statistics
| Date Registered | 09-10-2014 04:15 PM |
| Date Last Visited | 08-18-2017 04:02 AM |
| Total Messages Posted | 4 |
.jpg "VIP Advocate"){kind=icon}
