• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 687
  • Last Modified:

How to troubleshoot network issue with Cisco ASA, Router, Wireless AP, and Switch

Hello experts - I recently assumed additional responsibilities at work which include all switching and routing.  I'm not an expert (yet) so could use some help in getting started troubleshooting a particular issue.  I am attempting to setup a private wireless network that will connect Apple devices to my LAN for access to email and RDP.  Its 90% there, the only remaining issue is that users on the wireless network can't access https sites which run on it.  Going out to the internet works fine with https, its just internally where the sites won't load.  The configuration is setup where the wireless access points are connected to a 2504 controller.  This is attached to a 4510 switch as is the 2811 router (gateway) and 5510 ASA (firewall).  In this case I believe the problem is on the router or switch since requests for internal sites shouldn't be routed to the ASA.  

That is where I'm stuck.  I am not certain how best to troubleshoot access issues like this between devices.  I would appreciate any tips or advice to get me going, thanks!
0
First Last
Asked:
First Last
  • 4
1 Solution
 
Henk van AchterbergSr. Technical ConsultantCommented:
the problem is that you try to visit the external IP addresses that reside on the outside interface of the ASA.

You can do two things:

1. configure the DNS server to return the inside IP adresses of the server instead of the external IP's
2. NAT the external IP addresses FROM the inside TO the inside (and change the source IP address to the interface).
0
 
First LastAuthor Commented:
Hi henkva - perhaps I am misunderstanding your reply but I don't think it applies in this case.  I am already on the inside LAN connected to the wireless network.  I can ping, RDP, an access internal sites using HTTP but not HTTPS.  Everything out to the internet works fine as well.  So in my case these sites don't exist outside the LAN, they are only accessible internally.
0
 
atrevidoCommented:
can you post a network drawing so we can see how things are connected, it can be hand drawn and scanned if you don't have time to do a traditional Visio.  

Also, post a show run from your router, scrub the public ip addresses though
0
The IT Degree for Career Advancement

Earn your B.S. in Network Operations and Security and become a network and IT security expert. This WGU degree program curriculum was designed with tech-savvy, self-motivated students in mind – allowing you to use your technical expertise, to address real-world business problems.

 
First LastAuthor Commented:
Ok, that will take a little time, I'll work on it today.
0
 
First LastAuthor Commented:
I wound up working with Cisco on this and determined its not a Cisco issue but a problem with VMware networking.
0
 
First LastAuthor Commented:
Found own answer
0

Featured Post

Learn to develop an Android App

Want to increase your earning potential in 2018? Pad your resume with app building experience. Learn how with this hands-on course.

  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now