Hello I tested this solution with a juniper firewall as my default gateway. on the test I was able to get to the nat and everything was working correctly. after we installed the AGA on the live network i was only to able to ping the upstream router while i was console on the AGA firewall. I cannot get to the firewall from outside. I am pretty sure is a setting we are forgetting
here is the config fileResult of the command: (I was not able toping fromthe allowed network either thanks
"show running-config":
Saved:ASA Version 7.0(7)
hostname ciscoasadomain-name
default.domain.invalidenab
le password XXXXXXXXXXXXX encrypted
names
name 38.123.123.0 Communications
name 66.WW.WW.233 Steve
dns-guard
interface GigabitEthernet0/0
nameif inside
security-level 100
ip address 172.WW.1.1 255.255.255.0
interface GigabitEthernet0/1
shutdown
no nameif
no security-level
no ip address
interface GigabitEthernet0/2
nameif outside
security-level 0
ip address 38.WW.WW.154 255.255.255.252
interface GigabitEthernet0/3
shutdown
no nameif
no security-level
no ip address!interface
Management0/0
nameif management
security-level 100
ip address 192.168.1.1 255.255.255.0
management-only
passwd XXXXXXXXXX encrypted
ftp mode passive
object-group service ICMPRemoteAccess tcp-udp
port-object eq echo
object-group network ALLOWEDACCESS
network-object HurdITCommunications 255.255.255.0
object-group service Terminal tcp-udp
port-object range 3389 3389
object-group network Labs
network-object Steve 255.255.255.255
access-list inside_access_in extended permit ip any any
access-list outside_access_out extended permit ip any any
access-list outside_access_in extended permit ip object-group ALLOWEDACCESS any
access-list outside_access_in extended permit tcp object-group XPLabs any object-group Terminal access-list outside_access_in extended permit tcp any any object-group ICMPRemoteAccess
pager lines 24
logging asdm informational
mtu inside 1500mtu outside 1500
mtu management 1500
no failovermonitor-interface inside
monitor-interface outside
monitor-interface management
icmp permit any outside
asdm image disk0:/asdm-507.bin
no asdm history enable
arp timeout 14400
nat-controlglobal (inside) 1 10.24.1.10
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
static (inside,outside) 38.WW.WW.242 172.CC.1.10 netmask 255.255.255.255
static (inside,outside) 38.WW.WW.243 172.CC.1.11 netmask 255.255.255.255
static (inside,outside) 38.WW.WW.244 172.CC.1.12 netmask 255.255.255.255
static (inside,outside) 38.WW.WW.245 172.CC.1.13 netmask 255.255.255.255
static (inside,outside) 38.WW.WW.246 172.CC.1.14 netmask 255.255.255.255
static (inside,outside) 38.WW.WW.247 172.CC.1.15 netmask 255.255.255.255
access-group inside_access_in in interface insideaccess-group outside_access_in in interface outside
access-group outside_access_out out interface outside
route inside 0.0.0.0 0.0.0.0 38.XX.XX.153 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolutehttp server enable
http 0.0.0.0 0.0.0.0 inside
http 192.168.1.0 255.255.255.0 management
no snmp-server locatio
nno snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd address 192.168.1.2-192.168.1.254
managementdhcpd lease 3600
dhcpd ping_timeout 50
dhcpd enable management!
class-map inspection_default match default-inspection-traffic
policy-map global_policy
class inspection_default
inspect dns maximum-length 512
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
!service-policy global_policy global
Cryptochecksum:4b5205023de
7471a98fc9
1d1af39991
9
: end
Start Free Trial