We help IT Professionals succeed at work.
Get Started

Cant ping boxes on either side of ASA

367 Views
Last Modified: 2012-06-27
I am unable to ping a PC on the .104 network from the .105 network and vice versa. I can ping them from withing the ASA. Can someone take a glance at this configuration and see if there is sometime missing by any chance? Thank you

: Saved
:
ASA Version 8.2(1)
!
hostname ciscoasa
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Vlan100
 nameif outside
 security-level 0
 ip address 192.168.104.1 255.255.255.0
!
interface Vlan200
 nameif inside
 security-level 0
 ip address 192.168.105.1 255.255.255.0
!
interface Ethernet0/0
 switchport access vlan 100
!
interface Ethernet0/1
 shutdown
!
interface Ethernet0/2
 shutdown
!
interface Ethernet0/3
 shutdown
!
interface Ethernet0/4
 switchport access vlan 200
!
interface Ethernet0/5
 shutdown
!
interface Ethernet0/6
 shutdown
!
interface Ethernet0/7
 shutdown
!
ftp mode passive
access-list 101 extended permit icmp any any echo-reply log debugging
access-list 101 extended permit icmp any any source-quench log debugging
access-list 101 extended permit icmp any any unreachable log debugging
access-list 101 extended permit tcp any any log debugging
access-list 101 extended permit icmp any any time-exceeded log debugging
access-list 102 extended permit icmp any any source-quench log debugging
access-list 102 extended permit icmp any any unreachable log debugging
access-list 102 extended permit icmp any any echo-reply log debugging
access-list 102 extended permit icmp any any time-exceeded log debugging
access-list 102 extended permit tcp any any log debugging
pager lines 24
logging enable
logging asdm informational
mtu outside 1500
mtu inside 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-625.bin
no asdm history enable
arp timeout 14400
access-group 102 in interface outside
access-group 101 out interface outside
access-group 102 in interface inside
!
router rip
 network 192.168.104.0
 network 192.168.105.0
!
route inside 0.0.0.0 0.0.0.0 192.168.104.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 192.168.105.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet timeout 5
ssh timeout 5
console timeout 0

threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
webvpn
!
!
prompt hostname context
Cryptochecksum:1d3a6d212d0c981a5cd58d9753710381
: end
asdm image disk0:/asdm-625.bin
no asdm history enable

Comment
Watch Question
This problem has been solved!
Unlock 2 Answers and 13 Comments.
See Answers
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE