troubleshooting Question

Cisco ASA5505 problems

Avatar of Member_2_7970364
Member_2_7970364 asked on
CiscoHardware FirewallsRouters
24 Comments1 Solution115 ViewsLast Modified:
Hi - I am having a mare of a day here with this ASA ... I wonder if anyone can help

I basically have 2 domains running on the network and they all go via seperate ports on the cisco

domain1 - eth/1 - internal 10.0.9.x
domain2 - eth/2 - internal 10.0.1.x

I do not want the networks to communicate generally but the mailserver that hosts both is on the 10.0.1.x network

I have 6 usable Ip addresses and I have configured eth/1 to listen for incoming traffic on .21 and the rest on .22-24

All traffic for some reason goes out via .22 (ideally I would like the eth/1 to send all traffic via .21 - but its not the end of the world) but the issue currently is when someone on the 10.0.9.x networks wants their email they resolve the IP address for the server ( and this resolves for example but they can never connect

users on the 10.0.1.x network are OK as in DNS i have an IP for the  mailserver which sits on the .1 network

I suspect this is because all the addresses .20 - .25 are really on the same network

I see there is a option to allow connections between 2 networks wit the same security weighting but I really dont want them to communcate generally but as both companies are on the same mail server .. they need to just for this (but happy to use the external address)

Please does anyone have an idea on how to do this !!!

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 24 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 24 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros