asa config

I updated my firewall 5505 version and edited the config from the old version to new version. I just noticed that new version outside route is .142 and the old version outside route is .141 - while the outside interface is .142

I thought the route outside has to look at the outside interface, so how was it working in the old version? I might have made a typing error on the new versionand should have put .141


new version is:
object network obj_any
 nat (inside,outside) dynamic interface
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 75.22.180.142 1

old version is:
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 75.22.180.141 1

the outside interface is:
75.22.180.142
LVL 7
tolinromeAsked:
Who is Participating?
 
Pete LongConnect With a Mentor Technical ConsultantCommented:
?

The Route Outside command points to the IP address of the ROUTER supplied by your ISP it DOES NOT point to the outside interface IP address.

If you think yours DID then your are incorrect, or the config you are looking at is incorrect (or has been changed).

Traffic would never go outbound if the ASA looked at itself for its default route.


PL
0
 
Pete LongTechnical ConsultantCommented:
And OLD and NEW (i.e. pre and post version 8.3) the route command has not changed.
0
 
Pete LongTechnical ConsultantCommented:
>>route outside 0.0.0.0 0.0.0.0  75.22.180.142 1

If your outside IP is 75.22.180.142 then the above was NOT your route stement
0
 
tolinromeAuthor Commented:
yes, that was the problem. thanks.
0
All Courses

From novice to tech pro — start learning today.