Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Have an issue with a new ASA 5506W - setup allows internet access to all systems behind it except for the ones with a static NAT - we have separate IP addresses assigned to 2 servers, all the access rules are in place but neither of them have interne...
We have an ASA-5506 with 3 interfaces active - 1 outside pointed to the public IP range, 1 inside pointed to the primary internal network (10.1.1.1) and 1 inside2 pointed to a secondary internal domain / network (10.10.10.1). There are static routes ...
Have a client with an ASA 5506 - they have a single public static IP address obtained from the ISP's router through pppoe. I need to allow access through to their mail, web and FTP servers, I've had no issue setting this up on clients with multiple p...
What's the best way to crate a second VLAN on a 5506? Client has a 10.1.1.x subnet setup on interface 1/2 (inside) with interface 1/1 (outside) holding the public IP. Now they have a second domain on a 10.10.10.x subnet that will need internet access...
Installed an ASA-5506x on a client site - when a vendor sends the email using TLS they get < #5.0.0 smtp; 5.4.7 - Delivery expired (message too old) 'TLS Unavailable' (delivery attempts: 0)>'. Disabled the esmtp fixup protocol with no sucess. Tried a...
Thanks. The basic NAT works fine - all internal systems have internetaccess. The only ones that don't are the 2 (internal IP .102 and .103) thathave separate NAT rules:object network obj-192.168.1.102nat (any,any) static 50.250.1xx.xxAnd separate acc...
Hi Dennis,
Thanks. Right now our 10.10.10.x network only points to the ASA at 10.10.10.1 for internet access - nothing on it routes 10.1.1.x traffic (see ASA config below), is that where the 10.1.1.x routing needs to originate? Since I only want th...
So the command should be:
object network obj-http nat (inside,outside) static interface service tcp http http?
Thanks for your help - it will be tomorrow before we can reconnect it at the client site and I'll post the result for you.
Thanks. I reset the firewall as suggested, we have internet access but we're still not seeing the ports pass through:
!interface GigabitEthernet1/1 nameif outside security-level 0 pppoe client vpdn group Abc ip address pppoe setroute !interface Gig...
