unable to access internet from certain ip addresses

kcarjun2002 · ‎06-18-2007

I recently migrated our firewall from pix 6.3 to asa 5510. After the migration only the users having ip address 10.100.0.x can connect to the internet except the others having the IP address 10.100.1.x and 10.100.2.x. Everything else works fine as before. I copied most of the config including nat and accesslist from the previous config. What could be possible causes of this problem?

Jon Marshall · ‎06-18-2007

Hi

If possible could you send a copy of ASA config minus any sensitive info.

Jon

srue · ‎06-19-2007

check that you can ping a host in each of your subnets from the ASA.

make sure you have the correct NAT statements to allow all internal networks access to the 'net.

anandramapathy · ‎06-19-2007

check the subnet mask in the NAT statement & ensure that it convers all the subnets.

The subnet from where you are browsing - It may not be under the NAT / subnet mask may be wrong.

kcarjun2002 · ‎06-21-2007

Thanks for all the responses. I found that inside interface was setup with 24 bit netmask instead of 16 bit. After I changed the subnet mask, its working now.

anandramapathy · ‎06-21-2007

I am glad we were able to help you in resolving your issue.

Please rate useful posts.