Why can't I connect to the Internet from inside the Cisco 5520 Firewall ?

Problem:
No one inside the office has internet access.

I'm working with a Cisco 1900 series router,  Cisco 5520 ASA(firewall) and Dell Powerconnect 6224 switches.

Service has been confirmed up to the router.  The line out of the router goes into the Cisco 5520 ASA (firewall).  The line out the firewall goes into one of the Powerconnect Switches which are stacked (configured as master/slave (unit 1 & 2).

I can ping and connect to the switch from the Domain Controller but when I ping the Cisco 5520 (firewall) the reply I get is "Destination Host is Unreachable".  I get the same reply from workstations.

When the problem began one of the PC 6224 switches would not come on so the cables plugged into it were moved to the other switch.  Shortly after the switch that wasn't working came back on.  The cables were then randomly moved back into the switch.  I'm not sure if certain cables were designated for certain ports.

How can I get things working again.

Any help would be greatly appreciated.

Thanks in advance
S BAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
1. Make sure DNS has been properly set up.
2. Connect one computer directly to the modem (outside internet) and make sure that computer can get unimpeded Internet access via the modem.

Then we can proceed from there.
0
JustInCaseCommented:
The cables were then randomly moved back into the switch.  I'm not sure if certain cables were designated for certain ports.
This sounds sounds like something from  Douglas Adams Dirk Gently's "The Long Dark Tea-Time of the Soul" Zen navigation method.
"... A few turnings later and I was thoroughly lost. There is a school of thought which says that you should consult a map on these occasions, but to such people I merely say, 'Ha! What if you have no map to consult? What if you have a map but it's of the Dordogne?' My own strategy is to find a car, or the nearest equivalent, which looks as if it knows where it is going and follow it. I rarely end up where I was intending to go, but often I end up somewhere that I needed to be. So what do you say to that?"
You'll have to clean up cable mess that is created or reconfigure switch properly, since it is rarely gives good results when applied to networking.
0
Pete LongTechnical ConsultantCommented:
Think logically!

Get on the firewall, can that ping 8.8.8.8 (so we know internet is up)
Log onto the switches can they ping the inside interface of the ASA? (if not that trace the wire from the inside interface (ASA) to the switch, make sure its connected and in the correct VLAN.
Once you can do that can the switch ping 8.8.8.8? If not check the traffic is allowed, NAT is setup correctly, and ICMP inspection is enabled in the firewall.
Can a client then ping 8.8.8.8 if so and theres no internet can they resolve DNS using nslookup.
0
S BAuthor Commented:
Thanks J the DNS has been setup correctly.  

Also many thanks to Peter.  All of your suggestions were performed through putty and it was determined that the Cisco 5520 was no longer working.  Funny that End of Support for that device is September 30, 2018.

Thanks again

Solution: Replace the Firewall
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
S BAuthor Commented:
Thanks John and Peter your suggestions were very helpful.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Hardware Firewalls

From novice to tech pro — start learning today.