Hi,Product Cisco ASA 5505,I m not getting internet and not able to ping my outside interface (vlan2)or e 0/0
This is my ASA 5505 and Router Configuration please find out the problem and tell me where i km doing mistake..............firewalls e0/0 and e0/1 is up.
My lan ip range is 10.91.24.0 , My router's gatway is 10.91.24.1 and through router i m getting internet properly but with ASA 5505 i m not getting internet.....
PLEASE HELP ME.
Awaiting for your reply
Router's interface FastEthernet0/1
ip address 10.17.10.1 255.255.255.224
ASA5505(config)# interface Vlan 1
ASA5505(config-if)# nameif inside
ASA5505(config-if)# security-level 100
ASA5505(config-if)# ip address 10.91.24.5 255.255.255.0
ASA5505(config-if)# no shut
ASA5505(config)# interface Vlan 2
ASA5505(config-if)# nameif outside
ASA5505(config-if)# security-level 0
ASA5505(config-if)# ip address 10.17.10.2 255.255.255.224
ASA5505(config-if)# no shut
ASA5505(config)# interface Ethernet0/0
ASA5505(config-if)# switchport access vlan 2
ASA5505(config-if)# speed auto
ASA5505(config-if)# duplex auto
ASA5505(config-if)# no shut
ASA5505(config)# interface Ethernet0/1
ASA5505(config-if)# switchport access vlan 1
ASA5505(config-if)# speed auto
ASA5505(config-if)# duplex auto
ASA5505(config-if)# no shut
ASA5505(config)# global (outside) 1 interface
ASA5505(config)# nat (inside) 1 0.0.0.0 0.0.0.0
route outside 0.0.0.0 0.0.0.0 10.17.10.1
ASA5505(config)#wr m
1. Change your PCs default gateway to your firewalls' internal IP
2. configure the nameservers on your ASA
Then internet will work fine.
HI,
·
Please check
the whether the security level for DMZ and outside interface, If DMZ is high
security level. Please do the NAT configuration
· If it's having the same security level. Please issue the command "same-security-traffic permit inter-interface "in the global config mode.
763 views
Usually answered in minutes!
×