0
votes
1answer
24 views

Cisco ASA 5510 Inter-interface routing

I'm trying to setup a Cisco 5510 to route traffic between the outside and inside interfaces where both belong to public IP subnets. Our ISP assigned us a single point-to-point IP (207.107.110.150/30) ...
2
votes
1answer
398 views

Strongswan VPN Established but no Packets Routed

I'm setting up a VPN using strongSwan between a Linux instance on an Amazon EC2 instance and a remote network via its Cisco concentrator. I need to route packets from the Linux instance itself a ...
2
votes
1answer
314 views

Dual ISP Inbound NAT — Asymmetric routing

routing question here. In a dual ISP scenario is there way to use both external IPs and nat them to a web server in a higher security level? The issue I am running into is on the return path for ...
0
votes
1answer
58 views

ASA 5505 - Outside IPs required for VPN Tunnel?

I've set up a Site-Site VPN and it seems the config is fine as the other site can establish the tunnel fine. The problem I have is that my side never tries to bring the tunnel up. Ping/telnet ...
1
vote
2answers
624 views

Using a Cisco ASA 5505 to forward PXE (WDS) Requests

I have a Cisco ASA 5505 that uses around 5 NICS for different networks. Currently I'm using my ASA to route traffic as it's the only Cisco device I have capable of the small amount of routing ...
0
votes
1answer
138 views

Route being ignored on core Cisco 6500 switch?

This is less likely a bug, and more likely a lack of my own understanding on routing. I am having an asymmetric routing issue where return traffic is going out the wrong firewall. I have an explicit ...
7
votes
2answers
527 views

Routing via Cisco ASA is changing TCP sequence/ACK numbers

Our network has a dedicated VPN appliance that sits inside the office network. We have a Cisco ASA with a static route that routes the VPN subnets to the VPN appliance. So a typical request from the ...
0
votes
0answers
70 views

ASA 5505 Dedicate WAN Route to Voice Vlan

I've Got multiple WAN connections currently and I plan on moving towards a Active/standby Configuration in the near future, I have two asa 5505's with SecPlus licenses, the device is currently ...
1
vote
3answers
175 views

Cisco ASA Route command

I'm trying to route connections that are going outbound from my private network to an external IP via another host that is on my internal network. Should the following work? For example: External ...
0
votes
2answers
220 views

IP and Port Forwarding on ASA 5505

I have an ASA 5505 with outside network of public ips 95.123.234.64/26 and inside network of private ips 10.22.33.0/24. I would like to redirect any tcp traffic that hits 95.123.234.67:80 to a public ...
0
votes
3answers
927 views

Allowing inside traffic to outside on ASA 5505

We have an ASA 5505 with an inside interface 10.22.33.0/24 and outside x.x.x.x/26. The inside ip's are obviously private and the outside ip's are public. I've been able to set up a nat rule to route ...
0
votes
1answer
97 views

IPsec with various subnets on one side

I have the following situation: Client subnet(192.168.0.0 /24) ----> Router ----> Internet ----> ASA(172.17.0.2 /24) ----> (172.17.0.1 /24)Gateway ----> (10.0.0.0 ...
1
vote
1answer
388 views

ASA 5510 - Routing between Interface

I have a WAN interface and 2 LAN interface. I need both the LAN be able to access a server outside the network via the WAN (outside) interface. I am using a ASA 5510 firewall instead of a router, ...
0
votes
3answers
711 views

Using a nat rule to translate 80/443 traffic to web server, but internal users cannot access it using external ip/domain name

I am using Cisco ASDM for ASA I have my internal network called soa. My outside interface is called outside. Let's say my outside IP given to me by my ISP isp is y.y.y.y I have a web server inside ...
0
votes
1answer
971 views

Allow access to printer between interfaces on Cisco ASA5510

I have a Cisco ASA5510 where we have to separate networks on two separate interfaces. The networks should have nothing to do with each other except that network B needs to access a printer on network ...
0
votes
1answer
2k views

Cisco ASA 5505 Voice/Data VLANs not pinging/routing

Hi i am very new to Cisco ASA 5000 series and have two interfaces that i would like to route between, a data network 192.168.69.0/24 and voice 192.168.70.0/24, I have addded both and can ping the ...
0
votes
1answer
800 views

Public subnet configuration on a Cisco ASA 5520

I'm trying to set up a Cisco ASA 5520 as the main entry point for our datacenter setup. This setup includes: Three private networks (management, SAN and backup) that are used in a cloud server ...
1
vote
1answer
763 views

What is the ASA packet process order when there is both a VPN and route in place?

What will happen if there is a static route in place telling the packet to go to routerA but there is also a crypto map telling the packet to go over the VPN? Will it hit the route table first or go ...
0
votes
2answers
1k views

Can't ping gateway once VPN established

I have two servers: Checkpoint Safe@Office 500 with ip x.x.x.x and local network a.a.a.a/24 Cisco ASA5505 with ip y.y.y.y and local network b.b.b.b/28 Before setting up a vpn I was able to ping ...
1
vote
1answer
606 views

Failover ASA configuration using a Cisco 3750 switch as the router

We are trying to set up a failover ASA configuration at a colo who is only providing us with one network drop. Given that with one network drop, we are not able to completely eliminate all single ...
0
votes
1answer
1k views

VPN Client not able to access a certain subnet

Client connect to ASA5510 via cisco VPN client. Access to 192.168.0.x subnet works fine, just can't get to 192.168.13.x. I can get there from the ASA fine just not via a VPN connection. The connection ...
0
votes
1answer
3k views

Cisco ASA: How to route PPPoE-assigned subnet?

We've just received a fiber uplink, and I'm trying to configure our Cisco ASA 5505 to properly use it. The provider requires us to connect via PPPoE, and I managed to configure the ASA as a PPPoE ...
0
votes
1answer
2k views

Cisco ASA 5520 and “source routing based”

I have a Cisco ASA 5520 (8.3.x) with 3 interface active. One HDSL internet connection (outsite1), one ADSL internet connection (outside2) and one for internal LAN (inside). The default gateway is ...
1
vote
2answers
13k views

Problem routing between directly connected Subnets w/ ASA-5510

This is an issue I've been struggling with for quite some time, with a seemingly simple answer (Aren't all IT problems?). And that is the problem of passing traffic between two directly connected ...
0
votes
1answer
681 views

CISCO ASA 5505 Base Licence - Ability to interpret http request headers (host headers)

Base licence configured CISCO ASA 5505 is not capable of routing based on interpretation of the inbound http request headers - affectively host header redirect - am I correct? If I am correct will an ...
2
votes
1answer
8k views

Cisco ASA 5505 site to site IPSEC VPN won't route from multiple LANs

Hi I've set up a standard site to site VPN between 2 ASA 5505s (using the wizard in ASDM) and have the VPN working fine for traffic between Site A and Site B on the directly connected LANs. But this ...
0
votes
2answers
568 views

Cisco ASA: Routing packets based on where the connections started from

We have a Cisco ASA 5505 (version 8.2(2)) with three interfaces: outside: IP address 11.11.11.11, this is the default route inside: IP address 10.1.1.1, this is the local subnet newlink: 22.22.22.22, ...
1
vote
1answer
894 views

Route traffic on vpn to another interface on an ASA 5510

I have a ASA 5510 that has about 60-70 vpn tunnels. I have four interfaces on the device: 1)External, 2)192.168.1.0, 3)192.168.2.0, 4) 192.168.3.0 A VPN tunnel is configured from the remote site ...