Cisco Firewall :: ASA 5505 - Cannot Ping Any Of Subnet IPs

Sep 7, 2011

We want to use an ASA as a pure routing device. Our network has several internal subnets (10.1.x.0/24), and we want to be able to reach them from outside and to allow access between them.
 
We have a defined a VLAN for each subnet range with the same security-level, added it to an Ethernet port and made the Ethernet that acts as outside as a trunk, and defined it as the global routing.
 
We cannot ping any of the subnet IPs defined in the ASA from outside nor we can ping it from the internal IP addresses.
 
Configuration:
: Saved
:
ASA Version 8.2(1)

[Code].....

View 3 Replies


ADVERTISEMENT

Cisco Firewall :: ASA 5505 Cannot Ping From One Subnet To Another?

Aug 4, 2012

I have been tasked with replacing our company eSoft router with a Cisco ASA 5505 with the upgraded security license.   I have been working on the configuration for a couple of weeks now, after reading hundreds of forum posts, watching youtube videos, and endless google searching, and despite my best efforts I am still having an issue I can’t figure out.
 
I have a couple of subnets, that when the ASA is connected, I cannot ping, nor can they get to the internet or our Exchange server. At this point I’m not sure if it’s an access rule issue, NAT issue, or DNS issue.
 
Here is the network layout:
 
ASA: 192.168.0.2 (Primary Gateway)
192.168.0.0 (Primary facility, ASA is the gateway)
192.168.2.0 (Second facility, connected via Verizon point-to-point)
192.168.3.0 (Third facility, connected via Verizon point-to-point)

[Code].....

View 7 Replies View Related

Cisco Firewall :: Can't Ping ASA 5510 From Other Subnet

Dec 9, 2012

Background:  I have a couple of ASA 5510's I'm going to put in our lab environment.  I have restored them to default config and set up the m0/0 interface with an ip/mask and started the http server.  My lab environment is on the 10.45 subnet and my .com corporate environment is on the 10.40 subnet.  I've also setup DNS and, from the ASA, can ping anything in the 10.45 subnet.
 
The problem, is that from the ASA, I can not ping the internet or my 10.40 subnet.  And vice versa, I cannot ping the ASA from my 10.40 subnet.  When I bring up a regular server, there is no special configuration I need to do as those subnets talk to each other and nothing is restricted.
 
Is there something special I need to do go get it to work?  I tried adding a access list to allow icmp, but that didn't seem to work.Oh, and I'm getting to the ASA by RDPing into a lab server (on 10.45) then putty to the ASA.

View 7 Replies View Related

Cisco Firewall :: 5505 / How To Give Access To Remote Subnet

Mar 23, 2011

I want to give access to remote subnet on firewall 5505.

Remote subnet is 16x.15X.56.0

Here is my access list

access-list outside_5_cryptomap extended permit ip 192.168.12.0 255.255.254.0 16x.15X.56.0 255.255.254.0

View 7 Replies View Related

Cisco Firewall :: Adding Second Subnet On ASA 5505 With Security Plus License

Jan 31, 2012

We recently upgraded a ASA 5505 with the security plus license to allow us to add a second subnet, but are having a few problems configuring the second subnet.  The original subnet we have configured 10.1.1.0 is able to access the internet without any problems.  However the new subnet 10.1.5.0 is unable to access the internet and when we ran a trace packet the nat config nat (inside) 1 0.0.0.0 0.0.0.0 is showing as the rule that drops the packet.
 
Additionally we have not been able to get the 2 subnets to talk to each other even though same-security-traffic permit inter-interface is configured.  How to configure the subnet 10.1.5.0 to access the internet or to get the subnets to communicate.  Below is a streamlined version of our current config.

!interface Vlan1nameif insidesecurity-level 100ip address 10.1.1.1 255.255.255.0 ospf cost 10!interface Vlan2nameif outsidesecurity-level 0ip address 66.66.66.66 255.255.255.240 ospf cost 10!interface Vlan13nameif corporatesecurity-level 100ip

[Code].....

View 15 Replies View Related

Cisco Firewall :: ASA 5505 Multi Subnet / Vlan Routing?

May 4, 2011

I'm new to Cisco equipment much more familiar w/ Sonicwall w/ that said......I have a 5505 w/ Security Plus licensing
 
I have set up multiple VLANs as follows
 
VLAN 1 inside - still setup as 192.168.1.1 (will not be using this for our lan)
VLAN2 - outside
VLAN100 - LAN 10.1.1.1/24

[Code]....

If I do add all the VLANs above I understand I will probably have to make a trunk port since I only have 5 usable interfaces

View 12 Replies View Related

Cisco Firewall :: ASA 5505 Unable To Ping

Sep 9, 2011

I just tried to configure my ASA but unable to ping.  My setup is as follows:
 
Cable Modem (DHCP from IPS)---> ASA (192.168.1.1)--->Belking Router (192.168.5.1)--->Switch (192.168.5.14)--->
 
ASA Version 8.2(3)
!
hostname WoodHomeASA-1

[Code].....

View 30 Replies View Related

Cisco Firewall :: ASA 5505 - Ping Between Two VLANs?

May 24, 2012

i am trying to get my ASA 5505 with 2 internal VLANs (voice and data) and external internet VLAN to run in router as a stick, and route between VLANS.
 
I cant get it working though:

[code]...

View 4 Replies View Related

Cisco Firewall :: ASA 5505 - Nat Can't Ping Internet

Jun 17, 2012

I am trying to configure Nat on a clean ASA 5505, but can't get it to work.  I ran the commands below. On the ASA I can ping the internet and inside vlan ip.  On my laptop I can ping the ASA inside vlan ip, but I can't ping the outside vlan ip.  From another network I can ping the ASA outside public ip.  Is there an access-list that denies inside from accessing outside?
 
I am running version 8.4(3) and I erased the existing configuration.
  
ASA(config)# interface vlan 1
ASA(config-if)# ip address 10.0.0.1 255.255.255.0
ASA(config-if)# nameif inside

[Code].....

View 8 Replies View Related

Cisco Firewall :: ASA 5505 Ping Inside To Outside Don't Go

Sep 29, 2012

I have 2 ASA and would like to build a Side-to-Side VPN between these ASA. So I can learn something about configure a ASA for different thinks. But now I don`t can Ping from a Client to the Internet-Router.My Configuration is:
 
Client IP 192.168.1.100 <===> ASA Inside 192.168.1.1 /Outside 192.168.178.254 <===> Router 192.168.178.1
 
Is there something wrong at my config? or do I need inside private Adresses and at the Outside Global IP`s.
 
At the Router I have a Static Route that the 192.168.1.0 / 24 ist to find over Gateway 192.168.178.254

View 2 Replies View Related

Cisco Firewall :: Ping Router From ASA 5505?

Mar 19, 2013

I am trying to troubleshoot an ASA5505 connectivity issue. My initial tests are to ping the Internet router from the ASA This is failing and also a sh arp only shows internal addresses.
 
I have to go to site to check this out to confirm the following.
 
1: Should I be able to ping the Internet router from the ASA?

2: Do I need to permit any icmp to do this?

3: Should a sh arp show the address of the internet router?
 
I tried entering the command permit icmp any outside
 
However I got the error route already exists 0.0.0.0/0.0.0.0

View 2 Replies View Related

Cisco Firewall :: ASA 5505 - Cannot Ping Outside NAT Interface

Nov 14, 2011

I have a Cisco ASA 5505, the problem is I am not able to ping to outside natted interface (ip: 172.88.188.123 and 124 and 125) from inside network I have looked for ASA documentation through the internet and still got nothing.

the config are:
  
: Saved
:
ASA Version 8.2(1)
!

[Code].....

View 2 Replies View Related

Cisco Firewall :: New ASA 5505 / Can't Ping Inside Interface

May 10, 2011

I have a new ASA 5505 and all is working fine, I can CLI and ASDM into it, but just can't ping the inside interface, do I need to enable a feature to make this work somehow?

View 1 Replies View Related

Cisco Firewall :: 5505 - ASA Unable To Ping Internet From DMZ

Apr 5, 2013

I have setup 5505 ASA  for Testing purposes. It has static route to layer 3 switch on outside interface that  goes  to the internet.
 
ciscoasa#                                                sh route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area

[Code].....

View 20 Replies View Related

Cisco Firewall :: ASA 5505 8.2 - Clients Can't Ping External IP

Nov 4, 2011

I've configured a 5505 but internal clients can't ping external ip. To test I've connect a pc with the ip of the default router on the Outside int the ASA can ping the PC and the PC can ping the ASA, but internal clients can't ping the PC
 
PC config 195.12.23.241/28
 
Here's the ASA config, so far I've wiped the ASA and started with a blank sonfig and built it up but still not working.
 
 
ASA Version 8.2(5)
!
 
!
interface Ethernet0/0
switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
[Code] .....

View 2 Replies View Related

Cisco Firewall :: ASA 5505 With IOS 8.4 / Unable To Ping Or Map Drives To It?

Aug 12, 2012

I configured a new Asa 5505 with Ios 8.44-1-k8.bin and when I installed the Asa the client's after about 1 hour were unable to ping or map drives to the Asa.  I got the following error,%ASA-2-106007: Deny inbound UDP from XXXX to XXXX due to DNS Query. I added the command same-security-traffic permit intra-interface they were then able to ping the server and connect to the Internet, but still unable to map drives i could see the connections from the Pc's to the server in a show conn with was tcp port 445 with Saa? I reverted back to Ios 8.25 and everything works.

View 2 Replies View Related

Cisco Firewall :: 5505 - Can't Ping ASA Inside Interface

Dec 12, 2011

I have an ASA 5505 that I'm trying to set up a guest network on.  I've configured an interface as a trunk and allowed the 2 vlans but I'm not getting any layer 3 to it.  The switch connected to it is a 3560 and port is configured as a trunk with the same vlans.
 
I can't ping the ASA inside interface but I see its MAC address in the swtich's table.
 
[code]....

View 4 Replies View Related

Cisco Firewall :: Ping To Internet From Workstation Behind ASA 5505

Jul 30, 2011

I have a ASA 5505.  I want to be able to ping from my workstation to some address, lets say [URL].  My workstation is connected to Ethernet 0/2.  I have tried playing around with the ACL but am not able to accomplish this.   
 
Result of the command: "show running-config"
: Saved:ASA Version 8.2(1) !hostname ciscoasadomain-name home.7vnmotorsports.com

[Code]....

View 5 Replies View Related

Cisco Firewall :: 5505 - Ping And SNMP Broken After 8.4(4)1 Upgrade?

Sep 19, 2012

Before upgrading to 8.4(4)1 I was able to ping our inside interface accross the VPN.  Now I cannot.  Because ping is not working, my SNMP server thinks that the device is offline however I know the VPN tunnel is still up and the remote branch office is working fine.  Here is the config of the branch office ASA 5505 in question. How to get icmp working again?
 
ASA Version 8.4(4)1
!
hostname BranchASA5505
domain-name houston.deh

[Code].....

View 2 Replies View Related

Cisco Firewall :: ASA 5505 Cannot Ping Secondary Internal Network?

Jan 15, 2012

Cisco ASA 5505 Cannot Ping Secondary Internal Network.

View 9 Replies View Related

Cisco Firewall :: ASA 5505 - Cannot Ping Local Traffic And Hosts

Jul 24, 2012

I have, what I believe to be, a simple issue - I must be missing something. Site to Site VPN with Cisco ASA's. VPN is up, and remote hosts can ping the inside int of ASA (10.51.253.209). There is a PC (10.51.253.210) plugged into e0/1.

I know the PC is configured correctly with Windows firewall tuned off. The PC cannot get to the ouside world, and the ASA cannot ping 10.51.253.210.

I have seen this before, and I deleted VLAN 1, recreated it, and I could ping the local host without issue. Basically, the VPN is up and running but PC 10.51.253.210 cannot get out

ASA Version 7.2(4)
!
hostname *****
domain-name *****
enable password N7FecZuSHJlVZC2P encrypted
[Code]...

View 2 Replies View Related

Cisco Firewall :: ASA 5505 / Cannot Access Internet Or Ping From Inside Interface?

Jul 26, 2011

I am having a problem configuring my ASA 5505 for NAT.

View 3 Replies View Related

Cisco WAN :: 2960 Can't Ping All Devices On Remote Subnet

Sep 27, 2012

I have 4 x 2960 switches in a remote site. These are managed by an NMS in our DC, the NMS IP ends in 35.100 with a /23 mask.
 
When they are first booted, the switches are visable to the NMS, but after a week or 2, 3 of them drop connection to it. If you reboot them again they are fine. You are able to log onto them form thier local router and use a Radius server which is in the same subnet as the NMS.
 
The odd thing is, whilst they can not ping the NMS, they are able to ping any other addresses in the 34.0/23 range.
 
The config on the one that does not lose connection is the same as the other 3 and I have also rebooted the NMS.

View 3 Replies View Related

Cisco WAN :: 1841 / Can't Ping Every Machine Across GRE Tunnel To Remote Subnet

Apr 7, 2011

I have an GRE Tunnel across my head office and remote site with multiple subnets using cisco 1841 routers.I can ping most of  the devices on the remote side, but I can not ping certain devices.These  devices respond to ping requests on the local LAN, but not through the WAN link. If I change the IP of device than it start responding. I am using same gateway and mask on these devices.The remote site is running classic STP on switches with distribution switch being the root bridge.

View 4 Replies View Related

Cisco Wireless :: 871W Unable To Ping / Contact Another User On Same Subnet

Jul 28, 2012

I have an 871 set up at home with 2 VLANs, both of these vlans present a strange behavior where an user is unable to ping/contact another user on the same subnet, however if users are on different subnet it seems to work [code]
 
According to the troubleshooting that I have done, the issue seems to be with the broadcast traffic, ARP request/reply do not reach another host on the same subnet (wireless to wireless or wired to wireless) however if the wireless device iniciates the connection  to wired,  it works fine.
 
I have tried to enable proxy arp on the different VLANs and BVI and different combinations but no sucess in order to get traffic across 2 wireless devices on the same subnet or a connection that is iniciated for a wired client to a wireless one.
 
I tried enabling and disabling dot11 arp-cache but no luck.

View 2 Replies View Related

Cisco VPN :: ASA 5505 - SSL VPN To Lan Subnet

Oct 21, 2012

I'm not sure if this is a possible config, but I have an ASA that I need to be able to SSL VPN to, and get an IP Address that is on the same subnet as my internal interface.  The reason is, the person connecting in has a utility that does a broadcast on the internal network to discover the devices he is trying to connect to.  Therefore, connecting over VPN and getting put on a different subnet wont work. In this case, I am going to start the ASA configuration from scratch. If its possible to do the above, what are the correct commands to configure it?  I was planning to use 10.50.0.1/24 for the internal interface, and then hand out IP Addresses on that subnet to both the lan, and the vpn, This is an ASA 5505.  Its on IOS 8.4.

View 1 Replies View Related

Cisco :: ASA 5505 SSL VPN Can't Reach Inside From VPN Subnet

Jul 7, 2012

I've setup a SSL VPN to a ASA 5505 and can connect.

VPN network 192.168.2.0 /24
Inside Network 192.168.1.0 /24
Outside is connected to Router.

I am trying to RDP to a win server on the inside network but I cant get to it. Can not even ping 192.168.1.1 or (not sure if I could anyways) 192.168.2.1...

I added a ACL on the outside interface and then inside interface permit ip any any but still no ping or RDP...

New at VPN and have survived so far on cisco docs but this problem is evading me.

: Saved
:
ASA Version 8.2(5)
!
hostname ciscoasa

[Code]....

View 1 Replies View Related

Cisco VPN :: ASA 5505 SSL VPN Can't Reach Inside From Subnet?

Jul 6, 2012

I've setup a SSL VPN to a ASA 5505 and can connect.
 
VPN network 192.168.2.0 /24
Inside Network 192.168.1.0 /24
Outside is connected to Router.
 
I am trying to RDP to a win server on the inside network but I cant get to it. Can not even ping 192.168.1.1 or (not sure if I could anyways) 192.168.2.1...I can ping from the 192.168.1.0 net to 10.0.0.0 and 192.168.2.0 without issue but not the other way around....I added a ACL on the outside interface and then inside interface permit ip any any but still no ping or RDP...
 
: Saved
:
ASA Version 8.2(5)
!
hostname ciscoasa
enable password 2KFQnbNIdI.2KYOU encrypted
passwd 2KFQnbNIdI.2KYOU encrypted

[code]....

View 1 Replies View Related

Cisco :: ASA 5505 Series / Unable To Access New Subnet

Dec 7, 2011

I am working on a site that has recently added a new subnet and I am unable to ping any of the stations on this new network. I have configured an Exempt NAT rule just the same as the rules allowing access to other networks. I have a feeling the problem is in the Site-to-Site VPN configuration since the new subnet is at the primary location over the VPN.
 
In the site-to-site configuration I added the new subnet to the list of "Remote Networks" and I still can't communicate with any of the devices on the network. If I go to the main site I have no problems so it appears to be related to the VPN or a configuration in the ASA on that site.
 
A port scan shows that all the traffic is "filtered" so somewhere either the site ASA or the main ASA is blocking the traffic.

View 7 Replies View Related

Cisco VPN :: 5505 / IPSec VPN Between ASAs With Same Subnet For Disaster Recovery

Feb 9, 2012

We have to make disaster recovery site EasyVPN tunnels on Cisco 5505 ASA firewalls. Now there is only one main site and 3 remote sites.For DR we have to use the same subnet as it is on the main site because the Vmware virtual machines will be replicated to DR.For DR we are using Double Take software.What is the best solution for this? I think that we could use Destination NAT on ASAs. The other sites (HQ and remote) will se only the NAT address of theDR and not the real one which is the same as on the main site.We are using IPSec VPN? In packet-tracer on ASA I see that the packet is first NATed and then encrypted, so it should work, yes?

View 2 Replies View Related

Cisco Switching/Routing :: 5505 Running Out Of Available IP Addresses On Subnet

Oct 7, 2012

I have a customer who has an ASA 5505 that is handling the routing for their internal network. They are running out of available IP addresses on their subnet 192.168.1.0/24. They have dumb switches that don't suppport multiple vlans or trunking & they are only able to connect to one switchport on the ASA. He doesn't not want to purchase any new equipment or rearrange their existing equipment at this time. The customer would like to statically assign IP addesses for 192.168.1.x & 192.168.2.x and have the ASA hand out DHCP addresses for 192.168.3.x addresses. The customer suggested configuring a super subnet. A 192.168.0.0/22 address scheme would provide an ip range 192.168.0.0 - 192.168.3.255 on a single VLAN. I know this is an unconventional way to setup an internal network & I will definitely advise the customer that this should only be considered as a temporary solution until they get more appropriate network equipment.

View 3 Replies View Related

Cisco VPN :: Cannot Connect Or Ping ASA 5505 In LAX From That In SFO

Sep 19, 2012

I am trying to set up a lan to lan vpn access with 2 asa5505's but I cannot ping, traceroute or connect from either side.  I can connect to both ASA 5505's from the internet, and connect to the internet FROM both 5505's, just not one to the other.  I can ping the network GATEWAYS to the routers, just not the routers themselves.

Both of these machines have been configured for previous VPNs but that configuration has been removed.

View 12 Replies View Related

Cisco VPN :: ASA 5505 - Unable To Ping Or Use DNS On LAN

Aug 18, 2011

I've been called upon to fix the  SSL VPN issues in our ASA5505.  The issue I am having is that I am able  to log into the vpn, access the internet, but I'm unable to access  anything on the LAN.  I can't use ping or use DNS. 
 
I'm using ASDM v. 6.2(1) and ASA verison 8.2(1).  I'm not comfortable using the CLI and prefer the GUI.

View 13 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved