Tag Info

New answers tagged


ewwhite's answer is correct but incomplete. What's missing is the gateway information. ASA's do NOT set the ISP gateway through the startup wizard, even as of ASA 9.2(2).4. This is insanity-inducing because then no inside hosts can get to the Internet. To set the gateway via the ASDM: Login Go Configuration->Device Setup->Routing->Static Routes. Click ...


You need to make sure that intra interface traffic is allowed. sh run | i same-security-traffic If it isn't, then issue the following command: same-security-traffic permit intra-interface It will allow traffic to arrive and leave the firewall on the same interface (hairpining). Also, your static nat shouldn't be necessary since the traffic won't go ...

Top 50 recent answers are included