ASA 5510 Configuration. How to set up 2 outside the interface.

Hello

I have Cisco ASA 5510 and the desktop, I want to create a new route to another (external) router to my ISP.

The workstation I can Ping ASA E0/2 interface but I cannot ping the router ISP B inside and outside of the interface.

I based my setup on the existing configuration. which so far is working

interface Ethernet0/0
Outside of the interface description
nameif outside
security-level 0
IP 122.55.71.138 address 255.255.255.2
!
interface Ethernet0/1
Inside the interface description
nameif inside
security-level 100
IP 10.34.63.252 255.255.240.0
!
interface Ethernet0/2
Outside of the interface description
nameif outside
security-level 0
IP 121.97.64.178 255.255.255.240
!

Global 1 interface (outside)

global (outside) 2 interface (I created this for E0/2)
NAT (inside) 0 access-list sheep

NAT (inside) 1 10.34.48.11 255.255.255.255 (work: router ISP inside and outside interface E0/0)

NAT (inside) 2 10.34.48.32 255.255.255.255 (work: E0/2 router ISP on the inside interface only but cant outside ping).

Route outside 0.0.0.0 0.0.0.0 122.55.71.139 1 (work)

Route outside 10.34.48.32 255.255.255.255 121.97.64.179 1 (the new Road Test)

Router ISP, that a job can ping and I can access the internet

interface FastEthernet0/0
Description Connection to ASA5510
IP 122.55.71.139 255.255.255.248
no ip redirection
no ip proxy-arp
IP nat inside
automatic duplex
automatic speed
!
the interface S0/0
IP 111.54.29.122 255.255.255.252
no ip redirection
no ip proxy-arp
NAT outside IP
!
IP nat inside source static 122.55.71.139 111.54.29.122
IP http server
IP classless
IP route 0.0.0.0 0.0.0.0 Serial0/0

FAI 2

interface FastEthernet0/0 (SAA can ping this interface)
Description Connection to ASA5510
IP 121.97.64.179 255.255.255.248
no ip redirection
no ip proxy-arp
IP nat inside
automatic duplex
automatic speed
!
interface E0/0 (ASA Can not ping this interface)
IP 121.97.69.122 255.255.255.252
no ip redirection
no ip proxy-arp
NAT outside IP
!
IP nat inside source static 121.97.64.179 121.97.69.122
IP http server
IP classless
IP route 0.0.0.0 0.0.0.0 E0/0

CABLES

ASA to router ISP B (straight cable)

Router ISP in the UDI (straight cable)

Hope you could give some advice and the solution for this kind of problem please

Hello

Are you able to ping the router IP of the interface of the device of the ASA? If so, try a trace of package on the device of the SAA for traffic to the IP address of the router.

Thank you and best regards,

Maryse Amrodia

Tags: Cisco Security

Similar Questions

  • How to set up and enable the WINS and WINS-R resource records?

    How to set up and enable the WINS and WINS-R resource records?

    Hello

    Please repost these questions in the Technet Forums

    http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

    See you soon.

  • How to set background color of the text?

    I have a TextFrame: abcd

    I want to set the background color of the text "bc" is red

    How to set background color of the text?

    Who would be with custom underscore. Set the solid style, choose a color and to adjust the weight and offset of an underline, making it thick and move up behind the text.

  • How can I put pictures outside the window of Photoshop elements 14 work, so that I'm not obliged to work within the program window, but use my screen completely for the image?

    How can I put pictures outside the window of Photoshop elements 14 work, so that I'm not obliged to work within the program window, but use my screen completely for the image?

    dannyb76251437 wrote:

    How can I put pictures outside the window of Photoshop elements 14 work, so that I'm not obliged to work within the program window, but use my screen completely for the image?

    Note that you can work with two screens and drag and drop the image to display on the other window.

    I think you mean working temporarily with the window enlarged image without displaying all the tools and panels.

    See:

    Panels and bins in Photoshop Elements

    My advice: take the time to read the above help and especially to look at ways to maximize this window if you are on Mac or Win.

    Set your preferences in the Edit menu to "allow the floating windows in expert mode.

    Use the "tab" on the keyboard key to hide or show your panels and tools quickly.

    Find out how to hide the photo tray.

  • How to set up VPN on the router via ASA5505 2811

    Hello everyone

    I apologize for the possible triviality of my question. The current configuration of our society considers appropriate for the edge, two ASA5505 below that are installed two routers configured with the CCME 2811 Express. When the two AS5505 is configured a VPN connection for the transmission of data in our network traffic. Given the presence of several public addresses available on our two sites, I was wondering if you could (and if so, how) to set up a VPN between two routers 2811, except that when existing data traffic, dedicated exclusively to the voice traffic. It give me a document that teach me how can I solve my problem?

    Thank you very much

    Damiano,

    If you want an IPsec VPN for only separate voice and termination traffic on routers, there are several possibilities. Especially if you have a spare IP addresses:

    IPsec VPN endpoints on the routers.

    GRE over IPsec routers ending (gives you that soften what and where can be routed, in particular, identify voice traffic)

    Termination of free WILL on the routers and unloading IPsec to ASAs. (Benefit of the foregoing + ASAs making encryption).

    There is no problem to close the tunnels through the ASA, the only warning is that even in the case of static NAT you should probably use NAT-Traversal.

    Marcin

  • How to set a vacation on the microsoft exchange message response?

    I can't find the setting to a message of holiday on outlook express, where should I go to find the application?

    Outlook Express is noy uses Exchange, so you may need to clairify, but by OE, you can use a message rule.
     
    If you do this, you must let your computer 24/7, be connected to the Internet and open your e-mail program. If you want to do this anyway, the link below will show you how do it. One thing I would say is that where it says to create a rule and change you it to check for all Messages, and that the rule for the people in your address book. Otherwise you will answer Spam as well and could end up in an infinite loop of rebounds.
     
    Most of the servers of ISPs Internet/Mail to offer this service which would be a better choice.
     
    How to set up a reply automatic holiday in Windows Mail, Outlook Express or Windows Live Mail
    http://email.about.com/od/windowsmailtips/Qt/Vacation_Auto_Response_in_Windows_Mail_or_Outlook_Express.htm
     
    Configure Outlook & Outlook Express auto respond to incoming e-mail messages
    http://www.onecomputerguy.com/app_info/outlook_autoresponse.htm 
  • How to set up hotkeys on the keyboard wireless upper left Office 2000 model

    I bought MS Wireless Desktop 2000, keyboard/mouse combo.

    My PC is from 6 HP Pavilion 6000 came with wireless keyboard/mouse.

    I would like to define shortcut keys (1), (2), (3) on the top left of the foloowing IE and Mail keys for my anti virus update and the Update window.

    I can't find how to set these keys in naywhere on the Web.

    (1) how to set these keys?

    (2) what I have to install MS sweet came with the keyboard set?   If so, I have to remove old wireless flexible keyboard that came with my PC.

    (3) what is the name of the program for HP wireless keyboard, I will not facilitate the kidnapping by mistake.

    Also, how to set the sideway movement buttons on your mouse wheel.

    http://www.Microsoft.com/hardware/en-us/d/wireless-keyboard-2000 go to this link to download the software, so you can configure the keys 1,2,3,4 & 5

  • How to set 2 pc using the printer wireless?

    I use an HP laptop and a printer HP Envy connected via wireless, how I configured to use a second workbook use the printer?

    Just install the same software and drivers again and you're good to go.

  • How to set parental controls for the zone

    Im trying to set up parental controls for children. I have set up for the clock, but they got smart and started to change the time zone. Does anyone know how to set up parental controls for the time zone... At least the name of the program for the time zone. Any help is appreciated, thanks.

    Im trying to set up parental controls for children. I have set up for the clock, but they got smart and started to change the time zone. Does anyone know how to set up parental controls for the time zone... At least the name of the program for the time zone. Any help is appreciated, thanks.

    If you have a superior taste of Windows 7 you can / must define the rights to change the time system and time zone via the policy editor gpedit.msc. They are defined in the strategy/Security Settings user rights assignments / Local. Ensure that only administrators and the Local Service can change these settings.

    If you have a taste less then you need to do it via a number of commands in the console, i.e.
    net localgroup
    NTRights users - r seSystemtimePrivilege-u
    NTRights u users - r seTimezonePrivilege

    You can download ntrights.exe here: http://www.microsoft.com/download/en/details.aspx?id=17657. If you choose this option, you may need to then more detailed instructions. Post again if this is the case.

    Note also that your children are more intelligent, they will find additional methods to bypass your restrictions. If you let me sit in front of your machine then I would be able to do as I please in less than five minutes, without knowing a single password. This means that you may need to solve this problem by teaching ways rather than technical.

  • Cisco ASA 5510, ipsec vpn. What address to connect the client to

    Hello

    It's maybe a stupid question, but I can't find the answer anywhere.

    I used the ipsec vpn configuration wizard, I activated the external interface to access ipsec and went through SCW pools of addresses etc. When I try to connect with the cisco vpn client to my address of the external interface (of a remote host) I'm unable to connect. I scanned the interface for open ports, but there is not, I have to allow traffic to ipsec at this interface?

    Best regards

    Andreas

    No, once you have configured the access remote vpn ipsec, it will be automatically activated, and you should be able to connect to the ASA outside the ip address of the interface.

    Can you please share the configuration? and also which group name you are trying to access the vpn client?

  • How to set a password for the networks?

    Original title: related networks

    Hi, my request is how to set a password for networks

    Hello Manu,

    I suggest to follow the steps below and check the steps in the section to change the homegroup password , if it helps.

    Homegroup from start to finish

    http://Windows.Microsoft.com/en-us/Windows/HomeGroup-help#HomeGroup-start-to-finish=Windows-81&V1H=win81tab7&V2H=win7tab1

    Let us know the status.

  • How to set a variable in the main timeline of in a symbol?

    Just get started with Animate and coming from Flash, it may be apparent to my question. How do you define a variable for the main timeline of in a symbol?

    I have 24 pairs of clickable elements, each in their own symbols, and 24 of these symbols to sit inside another symbol. I want every 24 to set the global variable even when you click on it. I do not find that this question is anywhere, which makes me think that I can be stuck in a mentality from Flash and approaching the task in a bad way. (However, there are MANY discussions address showing how objects to different levels in the hierarchy.) Which is well covered).

    By the way, how to access a function on the main timeline of in a symbol?

    Adobe should consider putting on foot (or pages) support just for people migration form Flash. In the documents that I've met so far there seems to be a studied effort to refrain from mentioning Flash somehow. I imagine that there are many people out there like me who have a deep background in coding Flash, but start with Animate. We don't need help with most of the basic concepts, but we still have some pretty basic questions on how to achieve certain things in Animate because our knowledge of Flash gets in the way.

    Hi Bill,

    There are a lot of discussions here on the scope, but here's a way to create a global variable:

    code on Stage.compositionReady

    sym.myGlobalVar = 1;

    Then, anywhere in your project, you can check/set this var as follows:

    sym.getComposition () .getStage () .myGlobalVar = 2;

    And here is a way to create a global function:

    code on Stage.compositionReady

    sym.myGlobalFunction = function() {}

    Console.log ('myGlobalFunction');

    }

    Then, anywhere in your project, you can call this function as follows:

    sym.getComposition () .getStage () .myGlobalFunction ();

  • How to set different color for the table column header

    Can I set different colors for the 4 following as being attached.

    -color of the header text

    -the head of the column of the background color

    -color of the text of the content

    -color of background content

    The value of the cluster - 2, -2 to define all of the cells,

    Then go back and the cluster the value-1, -2 to simply set the line header.

    (If you also had a column of row headers, then -2,-1 would set them.  Course the upper left corner which is the intersection of the column header and row header will change with any of them.)

  • Several outside networks ASA - 1 outside the Interface

    Example scenario:

    A 20.0.0.0 (primary) site

    Site B 30.0.0.0 (primary)

    Greetings,

    I don't see being a problem from a point of view routing with 2 routers on each site and advertisements via BGP. We will announce the two networks at each site. However, mainly single site will get 20.0.0.0 traffic and site B will get 30.0.0.0 traffic. No problem with the NAT and so on.

    What I do not know how to deal with right now is if site B fails and the site began to receive the 30.0.0.0 traffic. There is just a single link between the router and firewall, site with the 20.x.x.x network. Any recommendations how A site can receive 30.0.0.0 transparent if site B goes bankrupt? (from a Point of view of ASA/NAT)

    Thank you

    Chris

    It is reasonable to assume that your ASA has a road the 30.0.0.0 network she is inside the interface?

    If so

    static (inside, outside) 30.0.0.0 30.0.0.0 netmask 255.0.0.0

    as long as the traffic to 30.0.0.0 is forwarded to the external interface of the firewall site has it can then accept this traffic and will forward it on internally.

    If I understand you, let me know.

    Jon

  • How can I specify VISA as the interface of the wizard of IVI instrument driver?

    After a long hiatus and to reinstall on a new hard drive, I resumed an IVI driver development. Previously, when I experienced, I was able to generate a driver that uses the API of VISA.

    Now, on this new installation, when I start the wizard, the only choices I have are Gbspecifications FOR, serial and VXI (message and registry).

    How can I specify VISA?

    Hey Frog,

    As this measure Studio LabWindows/CVI Instrument Driver Developer Guide , VISA i/o interface is the mechanism through which the pilot communicates with the hardware of the instrument. The IVI Instrument Driver Wizard allows you to only select among GPIB, VXI and series more specify the interface for your instrument.

    I hope this information helps!

Maybe you are looking for