Hi Julio,

can you help me on it

Sure,

Please me provide you an example, before I could confirm communication from the firewall to the gateways of the networks configured on the switch?

Hi

Try to executing these command lines:

Your NAT statement is ok so you dont need the following line:

no nat (inside,outside) after-auto source dynamic any interface

To enable the ACLs and apply it to the interface

access-group inside_access_in interface inside.

Please try and keep me posted. Also verify if the computers have the gateway configured and DNS addresses like 8.8.8.8 / 4.2.2.2

:-)

I can ping from switch 8.8.8.8

from user cannot ping 8.8.8.8 and no internet

attached new config of asa

Hi

They already should have Internet access, in order to enable ping try these commands:

access-list inside_access_in line 1 extended permit icmp 10.10.0.0 255.255.0.0 any echo
access-list inside_access_in line 2 extended permit icmp 10.10.0.0 255.255.0.0 any echo-reply

access-list ouside_in line 1 extended permit icmp host 172.16.32.253 any echo
access-list ouside_in line 2 extended permit icmp host 172.16.32.253 any echo-reply

Usually icmp is not part of IP, you need to enable icmp on both ways.

:-)

dear julio,

no successs, no internet

cannot ping 8.8.8.8

not able to ping the modem also

Thanks for the update,

Just a question about the IP configured under the outside interface, is it the IP of the network received through the modem? or it is the gateway? and the default route should be pointing to gateway, do you know what is the gateway for the subnet 172.16.32.0/24?

If you connect a PC to the modem, can you see what IP you obtained from the modem?

interface GigabitEthernet1/1
 description to WAN
 nameif outside
 security-level 0
 ip address 172.16.32.1 255.255.255.0 

route outside 0.0.0.0 0.0.0.0 172.16.32.253

172.16.32.253 is IP of the DSL MODEM

Thank you, 

If you connect a PC to the modem, can you see what IP you obtained and its gateway from the modem?

attached ip getting when directly connected to pc

yes, I can

Hi

Your firewall config looks fine, can you set up a PC manually and use DNS 8.8.8.8 and 4.2.2.2

Also Im assuming the ip routing command is configured on the layer 3 switch, is that correct?