Solved

How to troubleshoot network issue with Cisco ASA, Router, Wireless AP, and Switch

Posted on 2013-12-09
6
659 Views
Last Modified: 2013-12-21
Hello experts - I recently assumed additional responsibilities at work which include all switching and routing.  I'm not an expert (yet) so could use some help in getting started troubleshooting a particular issue.  I am attempting to setup a private wireless network that will connect Apple devices to my LAN for access to email and RDP.  Its 90% there, the only remaining issue is that users on the wireless network can't access https sites which run on it.  Going out to the internet works fine with https, its just internally where the sites won't load.  The configuration is setup where the wireless access points are connected to a 2504 controller.  This is attached to a 4510 switch as is the 2811 router (gateway) and 5510 ASA (firewall).  In this case I believe the problem is on the router or switch since requests for internal sites shouldn't be routed to the ASA.  

That is where I'm stuck.  I am not certain how best to troubleshoot access issues like this between devices.  I would appreciate any tips or advice to get me going, thanks!
0
Comment
Question by:First Last
  • 4
6 Comments
 
LVL 12

Expert Comment

by:Henk van Achterberg
ID: 39706721
the problem is that you try to visit the external IP addresses that reside on the outside interface of the ASA.

You can do two things:

1. configure the DNS server to return the inside IP adresses of the server instead of the external IP's
2. NAT the external IP addresses FROM the inside TO the inside (and change the source IP address to the interface).
0
 
LVL 1

Author Comment

by:First Last
ID: 39706732
Hi henkva - perhaps I am misunderstanding your reply but I don't think it applies in this case.  I am already on the inside LAN connected to the wireless network.  I can ping, RDP, an access internal sites using HTTP but not HTTPS.  Everything out to the internet works fine as well.  So in my case these sites don't exist outside the LAN, they are only accessible internally.
0
 
LVL 12

Expert Comment

by:atrevido
ID: 39708889
can you post a network drawing so we can see how things are connected, it can be hand drawn and scanned if you don't have time to do a traditional Visio.  

Also, post a show run from your router, scrub the public ip addresses though
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 1

Author Comment

by:First Last
ID: 39708928
Ok, that will take a little time, I'll work on it today.
0
 
LVL 1

Accepted Solution

by:
First Last earned 0 total points
ID: 39721487
I wound up working with Cisco on this and determined its not a Cisco issue but a problem with VMware networking.
0
 
LVL 1

Author Closing Comment

by:First Last
ID: 39733388
Found own answer
0

Featured Post

Connect further...control easier

With the ATEN CE624, you can now enjoy a high-quality visual experience powered by HDBaseT technology and the convenience of a single Cat6 cable to transmit uncompressed video with zero latency and multi-streaming for dual-view applications where remote access is required.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

How to set-up an On Demand, IPSec, Site to SIte, VPN from a Draytek Vigor Router to a Cyberoam UTM Appliance. A concise guide to the settings required on both devices
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question