I'm having a problem here with this 5510. I've got the ADSL connection up and running and I can ping internet IPs from the 5510. The problem is that I have a PC connected on the LAN side of the 5510 and that is unable to ping any internet IPs. I can ping the 5510's LAN IP from the PC but the packets aren't being forwarded over to the WAN interface for some reason. I can't ping the WAN IP of the 5510 either.
Can anyone share some insight? I've attached the configuration of the 5510 before setting up PAT as per this document --->> http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080b1ee95.shtml
Thanks in advance.
I agree with Golly and the others--it looks like the problem may be with your default gateway/routing. Are you sure the 'show route' output looks correct? It looks like the ASA is allowing the ICMP traffic and taking the correct translation.
To confirm this, you can setup packet captures for ICMP traffic on the outside interface of the ASA:
My guess is that you'll see the echo request headed out toward the Internet, but nothing coming back in.
Hope that helps.
"logging buffered 7"
run the ping from the LAN host and then do a "sh logg", we are looking for the icmp connection being built along with the xlate as the others pointed out.
It sounds like the default gateway of your hosts might be screwed...
Do the following test.
Can you PING the default gateway of the ASA from the inside computer?
Check the ''sh xlate'' and see if it's building the translation.
Also can do:
packet-tracer input inside tcp x.x.x.x 1024 220.127.116.11 80 (x.x.x.x is the inside IP of the computer)
This will show the results of attempting a connection on TCP port 80 to IP 198
To provide Internet through the ASA, normally you do the following:
nat (inside) 1 0 0
global (outside) 1 interface
To be able to PING you also add:
If the ASA has a private IP on its public interface, I assume the DSL is doing NAT for that IP (since you can PING internet from the ASA).
You can try the above and check the results.