asa 5505 can't access the Internet. Routing trouble?

robbhanMid · ‎07-23-2008

I can't access the default gw and therefore not the internet.

I'm trying to figure out if I'm doing something wrong or if my ISP is the one to blame.

I have configured the external interface ( outside )

!

interface Vlan2

nameif outside

security-level 0

ip address 213.136.41.180 255.255.255.248

!

I also have routing setup

route outside 192.168.1.0 255.255.255.0 10.10.10.1 1 ( this is for a site-to-site VPN )

route outside 0.0.0.0 0.0.0.0 213.136.41.177 1

The gateway address is 213.136.41.177

I can ping 213.136.41.180 and the other ip addresses our ISP provides but not my default gw.

Am I missing something?

Thanx

a.alekseev · ‎07-23-2008

conf t

access-list NO-NAT permit ip any 192.168.1.0 255.255.255.0

nat (inside) 0 access-list NO-NAT

nat (inside) 1 0 0

global (outside) 1 interface

no route outside 192.168.1.0 255.255.255.0 10.10.10.1 1

dhananjoy chowdhury · ‎07-23-2008

Hi,

First, to check the possibility of problem at ISP end you could directly connect a PC to the router interface and assign the ASA outside IP on the PC, and then try to access internet.

If this works fine then check at ASA end.

Check for the cable/connectivity between the ASA out interface and your Internet router.

Also it would help if you can share the NAT

and access-list statements from your config.

robbhanMid · ‎07-23-2008

Thanx for your reply. I tried connecting my PC directly to the switch and there's no connection. The problem must be at my ISP's end of the stick

ronshuster · ‎07-23-2008

When you connect the PC directly to the Internet switch, make sure you have the correct IP setting on the PC and attempt to ping the default gateway. If that doesn't work, it is likely the ISP. I would double check with the ISP to see if they can ping your PC.