asa 5505 can't access the Internet. Routing trouble?

Unanswered Question
Jul 23rd, 2008
User Badges:

I can't access the default gw and therefore not the internet.

I'm trying to figure out if I'm doing something wrong or if my ISP is the one to blame.

I have configured the external interface ( outside )


interface Vlan2

nameif outside

security-level 0

ip address


I also have routing setup

route outside 1 ( this is for a site-to-site VPN )

route outside 1

The gateway address is

I can ping and the other ip addresses our ISP provides but not my default gw.

Am I missing something?


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
a.alekseev Wed, 07/23/2008 - 02:22
User Badges:
  • Gold, 750 points or more

conf t

access-list NO-NAT permit ip any

nat (inside) 0 access-list NO-NAT

nat (inside) 1 0 0

global (outside) 1 interface

no route outside 1

dhananjoy chowdhury Wed, 07/23/2008 - 02:26
User Badges:
  • Silver, 250 points or more


First, to check the possibility of problem at ISP end you could directly connect a PC to the router interface and assign the ASA outside IP on the PC, and then try to access internet.

If this works fine then check at ASA end.

Check for the cable/connectivity between the ASA out interface and your Internet router.

Also it would help if you can share the NAT

and access-list statements from your config.

robbhanMid Wed, 07/23/2008 - 04:42
User Badges:

Thanx for your reply. I tried connecting my PC directly to the switch and there's no connection. The problem must be at my ISP's end of the stick

ronshuster Wed, 07/23/2008 - 05:11
User Badges:

When you connect the PC directly to the Internet switch, make sure you have the correct IP setting on the PC and attempt to ping the default gateway. If that doesn't work, it is likely the ISP. I would double check with the ISP to see if they can ping your PC.


This Discussion