ASA

edusilveira · ‎07-17-2008

Hello there,

I am experiencing an issue with ASA. Attached are the configurations I am using so that you can better understand the issue.

There is a host IP 192.168.3.5 - inside interface. For this interface the NAT works perfectly and it transforms into 192.168.2.8. At this point, the router is reached and it executes a NAT again. The machine in question is at VLAN 2 inside.

However when I put the other machines in the same VLAN 2, at the inside interface, the NAT DOES NOT operate correctly, the other machines neither can access the Internet nor can ping the network. The other machines only ping the gateway and internal network ip through of the internet, but not ping the internet and are on same network that the machine 192.168.3.5, strange.

This is a weird behavior as I believe the configurations are exactly the same. Finally the other problem I have is the I cannot access via SSH ASA's inside Network.

Any help here is appreciated

dhananjoy chowdhury · ‎07-17-2008

For the 1st prob - clear arp and nat on ASA

clear arp

clear xlate

For the 2nd prob - ssh

try generatiing the crypto key again

pix(config)#crypto key generate rsa modulus modulus_size

Also enable authentication for SSH

pix(config)#aaa authentication ssh console LOCAL

Hope this helps