Link to home
Start Free TrialLog in
Avatar of Scott Patterson
Scott Patterson

asked on

Cisco ASA 5505 Firewall issue cant get outside connectivity after upgrade 8.25 to 8.46

ASA Version 8.4(6)
!
hostname parASA
enable password TKUWW7Nj5Nf9I..m encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
!
interface Ethernet0/0
 switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
interface Vlan1
 nameif inside
 security-level 100
 ip address 192.168.2.2 255.255.0.0
!
interface Vlan2
 nameif outside
 security-level 0
 ip address 23.25.8.129 255.255.255.248
!
ftp mode passive
object network internal_lan
 subnet 192.168.0.0 255.255.0.0
object-group icmp-type ALLOW_ICMP
 icmp-object echo
 icmp-object echo-reply
 icmp-object traceroute
 icmp-object unreachable
 icmp-object time-exceeded
access-list INBOUND extended permit icmp any any object-group ALLOW_ICMP
access-list outside_in extended permit icmp any any echo-reply
access-list outside_in extended deny ip any any log
pager lines 24
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
!
object network internal_lan
 nat (inside,outside) dynamic interface
access-group outside_in in interface outside
route outside 0.0.0.0 0.0.0.0 23.25.8.133 1
route outside 0.0.0.0 0.0.0.0 23.25.8.134 1
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
aaa authentication http console LOCAL
aaa authentication serial console LOCAL
aaa authentication telnet console LOCAL
aaa authentication ssh console LOCAL
http server enable
http 192.168.0.0 255.255.0.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
telnet 192.168.0.0 255.255.0.0 inside
telnet timeout 5
ssh timeout 5
ssh key-exchange group dh-group1-sha1
console timeout 0

dhcpd dns 208.67.222.222 208.67.220.220
dhcpd update dns
!
Avatar of kevinhsieh
kevinhsieh
Flag of United States of America image

There are two routes to the internet configured. One of them is wrong.

configure terminal
no route outside 0.0.0.0 0.0.0.0 23.25.8.133 
end
write mem

Open in new window


We worked on this over the phone. Question should be closed out.
This question needs an answer!
Become an EE member today
7 DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.