ASA routing issue 2 ASA

[chamarag6]

Cannot ping from my core switch to outside the network (WAN /ISP) or other branches

[Flavio Miranda]

Hi

 Which is the password for device?

[chamarag6]

Need the ASA between switch and router if it possible the can add the 3 zones (PUBLIC PRIVATE DMZ)

same for all the other 2 branches

[chamarag6]

hq-asa
br-asa
Username - admin
Password - admin12345
Console login password all the devices
password -: x-iot12345

password -: x-iot12345

Enable secret for HQ deviceces

password -: head-office

[Flavio Miranda]

I can not login in the ASA with none of this password mate!

[Flavio Miranda]

Dont mind, I got into devices.

[Flavio Miranda]

Well, I see some problems here:

!

!

route PUBLIC 0.0.0.0 0.0.0.0 192.168.30.17 1

route PRIVATE 0.0.0.0 0.0.0.0 192.168.40.18 1

!

You can not have two default route on the ASA like this.  What you need to do here is:

To public, you can use a default route like you did.  But, for private you have to use specfic like

192.168.x.0

[Flavio Miranda]

Another issue I found, the core has a default route down to the Core, this is also wrong. The router for HQ has to have specifics routes to Firewall and the command redistribute static on the OSPF

Here what you need to change:

ASA HQ:

!

no route PRIVATE 0.0.0.0 0.0.0.0 192.168.40.18 1

!

route PUBLIC 0.0.0.0 0.0.0.0 192.168.30.17 1

route PRIVATE 192.168.3.0 255.255.255.0 192.168.40.18 1

route PRIVATE 192.168.4.0 255.255.255.0 192.168.40.18 1

route PRIVATE 192.168.5.0 255.255.255.0 192.168.40.18 1

route PRIVATE 192.168.6.0 255.255.255.0 192.168.40.18 1

route PRIVATE 192.168.9.0 255.255.255.0 192.168.40.18 1

!

Router HQ:

!

no ip route 0.0.0.0 0.0.0.0 192.168.30.18

!

ip classless

ip route 192.168.3.0 255.255.255.0 192.168.30.18

ip route 192.168.4.0 255.255.255.0 192.168.30.18

ip route 192.168.5.0 255.255.255.0 192.168.30.18

ip route 192.168.6.0 255.255.255.0 192.168.30.18

ip route 192.168.9.0 255.255.255.0 192.168.30.18

!

After that, ping is working for me from HQ to Brances

[chamarag6]

This is the file one branch not working 192.168.13.0 to 19 other branch works fine .ping to HQ

[Flavio Miranda]

ASA with OSPF. 

 I enabled and saw the neighborship is up but did not tested.

Do the test, remove the static routes and let me know.

[Flavio Miranda]

Hi

 this network as not added on the static routes.

You need to include in both router and ASA

Router:

ip route 192.168.13.0 255.255.255.0 192.168.30.18

ASA

ip route 192.168.13.0 255.255.255.0 192.168.40.18

[Flavio Miranda]

v4

[chamarag6]

HQ is fine then I added the ASA for BRs and did the same configurations as HQ but it's not working this is the last part if the ping is working then all is good

[Flavio Miranda · Accepted solution]

Hey @chamarag6  It is working. But I did nothing.