Solved

ASA 5505 Configuration - Static Route

Posted on 2008-10-20
2
2,646 Views
Last Modified: 2012-05-05
I am configuring a Cisco ASA 5505 and need to add a static route.  My internal network is 10.1.1.x and the internal IP address of the ASA is 10.1.1.1.  One service we use is connected to a router on the network with an IP of 10.1.1.12.  I need to route all traffic to the 192.108.200.X network through 10.1.1.12.  I thought it would be as simple as adding a route, which I did.  The command I used added a static route to the inside interface so that all traffic to 192.108.200.x goes through gateway 10.1.1.12 metric 2.  No go.  Is this even possible on the ASA 5505?  I've read some articles that seem to indicate this isn't a router and can't do that.  If it is possible, do I need an ACL?  I didn't think so as all internal traffic is allowed out to the internet and all internal devices can communicate with each other.
0
Comment
Question by:mikerich61
2 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 22759507
Yes, it can route, but probably not in the sense that you think.
The metric should be "1" and not 2 because the next hop is directly connected on the inside. But that is irrelevant.

What it won't do is allow you to have the ASA as the LAN default gateway and re-route packets that come from your PC going to 192.108.200.x, hit the inside ASA, then redirect them back out the same interface to the other router.
You have to have a default route on this other router pointing to the ASA, then point your PC's default gateway to this router and not the ASA. Routers can "bounce" the packet off to another locally connected gateway whereas the ASA cannot.
0
 
LVL 2

Accepted Solution

by:
JimmyLarsson earned 500 total points
ID: 22765957
As long as it is an ASA and not a Pix it[ running verion >7.0. In this case you can indeed reroute traffic back on the ingress interface. Here is some more information about this:

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080734db7.shtml

Br Jimmy Larsson
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cisco universal IOS upgrade from ipbase to ipservices 4 98
Trunk and Port Security 4 60
Cost effective dual wan w/ qos 5 42
Cisco ASA 3 25
Have you experienced traffic destined through a Cisco ASA firewall disappears and you do not know if the traffic stops in the firewall or somewhere else? The solution is the capture feature. This feature was released in 6.2(1) and works in all firew…
From Cisco ASA version 8.3, the Network Address Translation (NAT) configuration has been completely redesigned and it may be helpful to have the syntax configuration for both at a glance. You may as well want to read official Cisco published AS…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now