09-17-2019 10:59 AM - edited 02-21-2020 09:44 PM
Hi all,
Below in the configuration in ASA0, still unable to ping to outside interface gi/2, pls help
interface GigabitEthernet1/1
nameif inside
security-level 0
ip address 192.168.1.1 255.255.255.0
!
interface GigabitEthernet1/2
nameif outside
security-level 100
ip address 100.100.100.2 255.255.255.0
!
interface GigabitEthernet1/3
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/4
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/5
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/6
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/7
no nameif
no security-level
no ip address
shutdown
!
interface GigabitEthernet1/8
no nameif
no security-level
no ip address
shutdown
!
interface Management1/1
management-only
no nameif
no security-level
no ip address
!
object network LAN
subnet 192.168.1.0 255.255.255.0
!
route outside 0.0.0.0 0.0.0.0 100.100.100.1 1
!
access-list in_to_internet extended permit tcp any any
access-list in_to_internet extended permit icmp any any
!
!
access-group in_to_internet in interface outside
object network LAN
nat (inside,outside) dynamic interface
09-17-2019 11:40 AM
Hi,
You need to change the security-levels on your inside and outside interfaces. Inside should be 100 and outside should be 0. I assume you are pinging from the other ASA on 200.200.200.1? Make the changes below and try again.
interface GigabitEthernet1/1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
!
interface GigabitEthernet1/2
nameif outside
security-level 0
ip address 100.100.100.2 255.255.255.0
HTH
10-03-2019 12:21 AM
I have corrected security level, but also no luck
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide