Solved

ASA 5512 Config question

Posted on 2013-02-05
4
1,183 Views
Last Modified: 2013-03-14
I've configured an ASA 5512 and I'm not sure if the config is correct.  I wanted to see if anyone could glance at this config and see if they see any problems.  I'm in a situation where it needs to work immediately after it boots and I want to try to avoid any issues if I can.

I hope someone has a few minutes.  I really appreciate it.  Thanks.
ASA5512.txt
0
Comment
Question by:jplagens
  • 2
4 Comments
 
LVL 18

Expert Comment

by:fgasimzade
ID: 38858870
It looks fine.. What exactly this ASA need to do?
0
 
LVL 8

Accepted Solution

by:
pgolding00 earned 500 total points
ID: 38859377
dont know about:
route inside 68.65.151.0 255.255.255.0 192.168.10.10 1
because 192.168.10.0 is not attached to an interface. this would work on a router, but not so sure about recursive routing lookup on asa. you definitely cant source route, which is sort-of what this is trying to do. just use:
route inside 68.65.151.0 255.255.255.0 192.168.0.16
no question that this will work.

otherwise, as above, what are you trying to achieve with it?
0
 
LVL 4

Author Comment

by:jplagens
ID: 38859712
The issue was that this ASA 5512 was replacing an old Pix515e.  Due to the maintenance window I didn't have much time, so it was going to be pretty much unplug/unrack the Pix, put in the ASA, turn it on and it had to work.  I haven't done a lot of work with the new NAT commands in 8.3 or higher so I was stressing a little about it working.

I discovered that inside route to 192.168.10.10.1 wasn't needed.  No one new what it was so I removed it.

The only changes I made was that I added a new object:

object network OBJ_ANY
subnet 0.0.0.0 0.0.0.0
nat (inside,outside) dynamic interface

and I forgot to apply the access-list:

access-group inbound in interface outside
0
 
LVL 18

Expert Comment

by:fgasimzade
ID: 38859816
Yeah, I was just going to point out, that you will not be able to access Internet unless you configure dynamic NAT, what you have done.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

This is about downgrading PIX Version 8.0(4) & ASDM 6.1(5) to PIX 7.2(4) and ASDM 5.2(4) but with only 64MB RAM and 16MB flash. Background: You have a Cisco Pix 515E which was running on PIX 7.2(4) and its supporting ASDM 5.2(4) without any i…
Overview The Cisco PIX 501, PIX 506e, ASA 5505 and ASA 5510 (most if not all of this information will be relevant to the PIX 515e but I do not have a working configuration handy to verify the validity) are primarily used within small to medium busi…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now