Cisco Firewall :: 5505 - ASA Unable To Ping Internet From DMZ

Apr 5, 2013

I have setup 5505 ASA  for Testing purposes. It has static route to layer 3 switch on outside interface that  goes  to the internet.
ciscoasa#                                                sh route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area


View 20 Replies


Cisco Firewall :: ASA 5505 Unable To Ping

Sep 9, 2011

I just tried to configure my ASA but unable to ping.  My setup is as follows:
Cable Modem (DHCP from IPS)---> ASA (>Belking Router (>Switch (>
ASA Version 8.2(3)
hostname WoodHomeASA-1


View 30 Replies View Related

Cisco Firewall :: ASA 5505 With IOS 8.4 / Unable To Ping Or Map Drives To It?

Aug 12, 2012

I configured a new Asa 5505 with Ios 8.44-1-k8.bin and when I installed the Asa the client's after about 1 hour were unable to ping or map drives to the Asa.  I got the following error,%ASA-2-106007: Deny inbound UDP from XXXX to XXXX due to DNS Query. I added the command same-security-traffic permit intra-interface they were then able to ping the server and connect to the Internet, but still unable to map drives i could see the connections from the Pc's to the server in a show conn with was tcp port 445 with Saa? I reverted back to Ios 8.25 and everything works.

View 2 Replies View Related

Cisco Firewall :: ASA 5505 - Nat Can't Ping Internet

Jun 17, 2012

I am trying to configure Nat on a clean ASA 5505, but can't get it to work.  I ran the commands below. On the ASA I can ping the internet and inside vlan ip.  On my laptop I can ping the ASA inside vlan ip, but I can't ping the outside vlan ip.  From another network I can ping the ASA outside public ip.  Is there an access-list that denies inside from accessing outside?
I am running version 8.4(3) and I erased the existing configuration.
ASA(config)# interface vlan 1
ASA(config-if)# ip address
ASA(config-if)# nameif inside


View 8 Replies View Related

Cisco Firewall :: Ping To Internet From Workstation Behind ASA 5505

Jul 30, 2011

I have a ASA 5505.  I want to be able to ping from my workstation to some address, lets say [URL].  My workstation is connected to Ethernet 0/2.  I have tried playing around with the ACL but am not able to accomplish this.   
Result of the command: "show running-config"
: Saved:ASA Version 8.2(1) !hostname ciscoasadomain-name


View 5 Replies View Related

Cisco Firewall :: Unable To Ping Internet IPs From ASA5505 Firewall

Jan 9, 2013

Internet ISP -> Juniper SRX 210 Ge-0/0/0
Juniper fe0/0/2  -> Cisco ASA 5505
Cisco ASA 5505 - >Inernal LAN switch.
1.  Internet  is connected to Juniper Ge0/0/0  via /30 IP.
2. Juniper fe0/0/2 port is configured as inet port and configured the Internal public LAN pool provided by the ISP. And this port is directly connected to  Cisco ASA 5505 E0/0. Its a /28 pool IP address. This interface is configured as outside and security level set to 0.

From Juniper SRX, am able to ping public Internet IPs (

1. From ASA am unable to ping public ip configured on Juniper G0/0/0 port.(/30)
2. From ASA no other Public internet IP is pinging.
Troubleshooting Done so far.
1, Configured icmp inspection on ASA.
2. Used the packet tracer in ASA, it shows the packet is flowing outside without a drop.
3.  Allowed all services in untrust zone in bound traffic in Juniper SRX.
4. Viewed the logs when I was trying the ping in ASA. It says "Tear down ICMP connection for faddrr **** gaddr **

View 2 Replies View Related

Cisco Firewall :: ASA 5505 / Cannot Access Internet Or Ping From Inside Interface?

Jul 26, 2011

I am having a problem configuring my ASA 5505 for NAT.

View 3 Replies View Related

Cisco Firewall :: ASA 5505 Unable To Get To Internet

Dec 27, 2011

First time attempting to set up a 5505.  Trying to replace a snapgear firewall and replicate the settings to the 5505. 

View 12 Replies View Related

Cisco Firewall :: ASA 5505 / Unable To Use Internet?

Dec 11, 2012

I am using ASA 5505.Below are my sh run.I am not able to ping my gatway i.e
interface Ethernet0/0
description Internet Interface
switchport access vlan 61
interface Ethernet0/1
description office Internet
switchport access vlan 50


View 3 Replies View Related

Cisco Firewall :: Unable To Access Internet With ASA 5505

Sep 27, 2012

I have config ASA 5505 and it is conencted to layer 3 switch that connects to cable  Modem.
ASA is config with DHCP option and PC is able to get the IP from ASA. But from PC i am unable to access the internet. From ASA  itself i am able to ping the Websites fine.
ASA has config with DHCP for inside and also it is doing NAT.
When i connect the ASA  directly to Cable modem then pc is able to access the internet.

View 4 Replies View Related

Cisco Firewall :: ASA 5505 / Unable To Get Internet When Using DHCP?

Jun 28, 2011

I found a tricky task for our ASA 5505 firewall. I am not able to go internet when using DHCP but I can access by using fixed IP address in client PC.Same IP, Same Mask, Same DNS, Same Gateway. All the same but no hope. Any configuration i missed in firewall?

View 5 Replies View Related

Cisco Firewall :: ASA 5505 - Unable To Connect To The Internet

Mar 8, 2011

I'm unable to have any internet connection for my new setup.
here's the overview.
Current setup is
Internet -> Router -> PIX 501 -> Switch -> clients
Internet -> static ip given is -
Router -> Static ip assigned for NAT/External is, Local ip is
PIX 501 setting ->
IP to Router, According to router screen is, but not sure what settings are done in the PIX itself as I'm unable to access it.
local ip is
Clients - >
Old setup is working fine and connected to internet. for the new setup, as i do not want any downtime for the old setup.
As you can see, there are two firewalls connected concurrently to the router. I've configured it this way.
Internet -> Router -> ASA 5505 -> Switch -> clients
ASA 5505 setting ->
IP to Router NAT/External/ Outside Interface, (Or do i set as,
local ip/ Inside Interface is
Clients - >
some setup details.
security policy, NAT, set to default. routing is route outside 210193.34.6
I'm unable to access after a week of troubleshooting.

View 7 Replies View Related

Cisco VPN :: ASA 5505 - Unable To Ping Or Use DNS On LAN

Aug 18, 2011

I've been called upon to fix the  SSL VPN issues in our ASA5505.  The issue I am having is that I am able  to log into the vpn, access the internet, but I'm unable to access  anything on the LAN.  I can't use ping or use DNS. 
I'm using ASDM v. 6.2(1) and ASA verison 8.2(1).  I'm not comfortable using the CLI and prefer the GUI.

View 13 Replies View Related

Cisco Switching/Routing :: 4.2.2 Unable To Ping 1 Internet Site From Edge Router Able To Ping

Jan 18, 2013

From My Router that connects to Cable modem i am unable to ping website am able to ping all other websites fines.Same website i can ping from my pc and all other switches fine.Router has only 1 ACL thats for NAT.

View 25 Replies View Related

Cisco Firewall :: ASA5510 - Unable To Ping From User Desktop To Firewall Inside IP

Jun 11, 2012

I am able to ping from Switch to firewall inside ip and user desktop ip but unable to ping from user desktop to  FW Inside ip.. config is below for both switch and FW Cisco ASA5510....
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:


View 7 Replies View Related

Cisco Firewall :: ASA-5580 / Unable To Ping Firewall

Apr 18, 2012

We are going to impliment Spectrum (CA) in my network,i have ASA-5580-20 firewall now my spectrum server want to communicate with firewall,then only it will discover the firewall logs.Now the problem is my spectrum server is in MZ zone( security leval is 70 and my inside interface( security leval is 100.
I am unable to ping from spectrum server to firewall because of high security leval.How can i solve this problem,can  i change my inside security leval to 69 then i think it will ping.

View 1 Replies View Related

Cisco Firewall :: ASA 5505 - Ping Between Two VLANs?

May 24, 2012

i am trying to get my ASA 5505 with 2 internal VLANs (voice and data) and external internet VLAN to run in router as a stick, and route between VLANS.
I cant get it working though:


View 4 Replies View Related

Cisco Firewall :: ASA 5505 - Cannot Ping Any Of Subnet IPs

Sep 7, 2011

We want to use an ASA as a pure routing device. Our network has several internal subnets (10.1.x.0/24), and we want to be able to reach them from outside and to allow access between them.
We have a defined a VLAN for each subnet range with the same security-level, added it to an Ethernet port and made the Ethernet that acts as outside as a trunk, and defined it as the global routing.
We cannot ping any of the subnet IPs defined in the ASA from outside nor we can ping it from the internal IP addresses.
: Saved
ASA Version 8.2(1)


View 3 Replies View Related

Cisco Firewall :: ASA 5505 Ping Inside To Outside Don't Go

Sep 29, 2012

I have 2 ASA and would like to build a Side-to-Side VPN between these ASA. So I can learn something about configure a ASA for different thinks. But now I don`t can Ping from a Client to the Internet-Router.My Configuration is:
Client IP <===> ASA Inside /Outside <===> Router
Is there something wrong at my config? or do I need inside private Adresses and at the Outside Global IP`s.
At the Router I have a Static Route that the / 24 ist to find over Gateway

View 2 Replies View Related

Cisco Firewall :: ASA 5505 Cannot Ping From One Subnet To Another?

Aug 4, 2012

I have been tasked with replacing our company eSoft router with a Cisco ASA 5505 with the upgraded security license.   I have been working on the configuration for a couple of weeks now, after reading hundreds of forum posts, watching youtube videos, and endless google searching, and despite my best efforts I am still having an issue I can’t figure out.
I have a couple of subnets, that when the ASA is connected, I cannot ping, nor can they get to the internet or our Exchange server. At this point I’m not sure if it’s an access rule issue, NAT issue, or DNS issue.
Here is the network layout:
ASA: (Primary Gateway) (Primary facility, ASA is the gateway) (Second facility, connected via Verizon point-to-point) (Third facility, connected via Verizon point-to-point)


View 7 Replies View Related

Cisco Firewall :: Ping Router From ASA 5505?

Mar 19, 2013

I am trying to troubleshoot an ASA5505 connectivity issue. My initial tests are to ping the Internet router from the ASA This is failing and also a sh arp only shows internal addresses.
I have to go to site to check this out to confirm the following.
1: Should I be able to ping the Internet router from the ASA?

2: Do I need to permit any icmp to do this?

3: Should a sh arp show the address of the internet router?
I tried entering the command permit icmp any outside
However I got the error route already exists

View 2 Replies View Related

Cisco Firewall :: ASA 5505 - Cannot Ping Outside NAT Interface

Nov 14, 2011

I have a Cisco ASA 5505, the problem is I am not able to ping to outside natted interface (ip: and 124 and 125) from inside network I have looked for ASA documentation through the internet and still got nothing.

the config are:
: Saved
ASA Version 8.2(1)


View 2 Replies View Related

Cisco Firewall :: New ASA 5505 / Can't Ping Inside Interface

May 10, 2011

I have a new ASA 5505 and all is working fine, I can CLI and ASDM into it, but just can't ping the inside interface, do I need to enable a feature to make this work somehow?

View 1 Replies View Related

Cisco Firewall :: ASA 5505 8.2 - Clients Can't Ping External IP

Nov 4, 2011

I've configured a 5505 but internal clients can't ping external ip. To test I've connect a pc with the ip of the default router on the Outside int the ASA can ping the PC and the PC can ping the ASA, but internal clients can't ping the PC
PC config
Here's the ASA config, so far I've wiped the ASA and started with a blank sonfig and built it up but still not working.
ASA Version 8.2(5)
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
[Code] .....

View 2 Replies View Related

Cisco Firewall :: 5505 - Can't Ping ASA Inside Interface

Dec 12, 2011

I have an ASA 5505 that I'm trying to set up a guest network on.  I've configured an interface as a trunk and allowed the 2 vlans but I'm not getting any layer 3 to it.  The switch connected to it is a 3560 and port is configured as a trunk with the same vlans.
I can't ping the ASA inside interface but I see its MAC address in the swtich's table.

View 4 Replies View Related

Cisco Firewall :: 5505 - Ping And SNMP Broken After 8.4(4)1 Upgrade?

Sep 19, 2012

Before upgrading to 8.4(4)1 I was able to ping our inside interface accross the VPN.  Now I cannot.  Because ping is not working, my SNMP server thinks that the device is offline however I know the VPN tunnel is still up and the remote branch office is working fine.  Here is the config of the branch office ASA 5505 in question. How to get icmp working again?
ASA Version 8.4(4)1
hostname BranchASA5505
domain-name houston.deh


View 2 Replies View Related

Cisco Firewall :: ASA 5505 Cannot Ping Secondary Internal Network?

Jan 15, 2012

Cisco ASA 5505 Cannot Ping Secondary Internal Network.

View 9 Replies View Related

Cisco Firewall :: ASA 5505 - Cannot Ping Local Traffic And Hosts

Jul 24, 2012

I have, what I believe to be, a simple issue - I must be missing something. Site to Site VPN with Cisco ASA's. VPN is up, and remote hosts can ping the inside int of ASA ( There is a PC ( plugged into e0/1.

I know the PC is configured correctly with Windows firewall tuned off. The PC cannot get to the ouside world, and the ASA cannot ping

I have seen this before, and I deleted VLAN 1, recreated it, and I could ping the local host without issue. Basically, the VPN is up and running but PC cannot get out

ASA Version 7.2(4)
hostname *****
domain-name *****
enable password N7FecZuSHJlVZC2P encrypted

View 2 Replies View Related

Cisco WAN :: 3560 / Unable To Ping Out From LAN Via PIX Firewall

Mar 29, 2012

I have the following setup.
host PC ( -----> gateway ( ----- Pix E1 ( E0 (81.x.x.250) ------ Internet
The gateway is a 3560 switch connected to the PIX. I can ping out to the Internet via IP from the PIX, but not via the host PC ( on the LAN. PIX and gateway configs below. Am I missing something that's preventing me pinging out to the Internet from the internal LAN?
PIX config
test-cal-pix01# sh run
: Saved
PIX Version 8.0(3)
hostname test-cal-pix01
enable password btf1YD.Vq7mE6vEA encrypted


View 1 Replies View Related

Cisco Firewall :: PIX 515E Unable To Ping Outside From Inside

Dec 1, 2012

I' d like to have some support for a very-basic PIX firewall configuration. I 'm dealing with  PIX 515E. Inside hosts can ping inside interface , outside hosts outside interface and so on. Simply i cannot ping outside interface from inside hosts, Inside host-

Outside - any host like, or to check my isp link's dns ip. I have attached the pix configuration text file to test.

View 10 Replies View Related

Cisco Firewall :: Unable To Ping Default Gateway On ASA 5510

Mar 31, 2011

We have two ASA5510s, each with outside interfaces to the same two ISPs (different IP addresses within the same subnet, of course). Both ASAs allow ICMP on all (inside and outside) interfaces. One ASA's default route is to ISP-1 and the other is to ISP-2. We can ping the default gateways for both ISPs from only one ASA. From the other ASA, we can only ping the default gateway for the default route but not the other. The pings originate from an inside client, first configured with the default gateway for ASA-1, then for ASA-2. Why does this happen, how do I troubleshoot something like this and how do I fix it?

View 1 Replies View Related

Cisco Firewall :: ASA 5510 Unable To Ping From Outside Interface Or Cloud

Nov 27, 2012

One of my client has BSNL leased line with LAN IP POOL we configured those on ASA 5510 nad Internet working fine but from cloud we are not getting any response for ping requiest please find running configuration below:
ciscoasa(config)# sh run
: Saved
ASA Version 8.2(1)


View 4 Replies View Related

Cisco Firewall :: 4710 - Unable To Ping From MZ To Virtual Interface Of ASA

May 3, 2012

one of my SNMP server sits in MZ zone,and ACE 4710 is connected to core switch,coreswitch is connected to firewall asa.
Now iam trying to ping from MZ zone SNMP server to loadbalancer ip,iam unable to ping my LB interface to discover SLB on my SNMP server.

View 1 Replies View Related

Copyrights 2005-15, All rights reserved