09-17-2019 10:59 AM - edited 02-21-2020 09:44 PM
Hi all,
Below in the configuration in ASA0, still unable to ping to outside interface gi/2, pls help
interface GigabitEthernet1/1
nameif inside
security-level 0
ip address 192.168.1.1 255.255.255.0
!
interface GigabitEthernet1/2
nameif outside
security-level 100
ip address 100.100.100.2 255.255.255.0
!
interface GigabitEthernet1/3
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/4
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/5
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/6
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/7
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/8
no nameif
no security-level
no ip address
shutdown
!
interface Management1/1
management-only
no nameif
no security-level
no ip address
!
object network LAN
subnet 192.168.1.0 255.255.255.0
!
route outside 0.0.0.0 0.0.0.0 100.100.100.1 1
!
access-list in_to_internet extended permit tcp any any
access-list in_to_internet extended permit icmp any any
!
!
access-group in_to_internet in interface outside
object network LAN
nat (inside,outside) dynamic interface
09-17-2019 11:40 AM
Hi,
You need to change the security-levels on your inside and outside interfaces. Inside should be 100 and outside should be 0. I assume you are pinging from the other ASA on 200.200.200.1? Make the changes below and try again.
interface GigabitEthernet1/1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
!
interface GigabitEthernet1/2
nameif outside
security-level 0
ip address 100.100.100.2 255.255.255.0
HTH
10-03-2019 12:21 AM
I have corrected security level, but also no luck
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: