Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

unable to access internet from certain ip addresses

I recently migrated our firewall from pix 6.3 to asa 5510. After the migration only the users having ip address 10.100.0.x can connect to the internet except the others having the IP address 10.100.1.x and 10.100.2.x. Everything else works fine as before. I copied most of the config including nat and accesslist from the previous config. What could be possible causes of this problem?

5 REPLIES
Hall of Fame Super Blue

Re: unable to access internet from certain ip addresses

Hi

If possible could you send a copy of ASA config minus any sensitive info.

Jon

Gold

Re: unable to access internet from certain ip addresses

check that you can ping a host in each of your subnets from the ASA.

make sure you have the correct NAT statements to allow all internal networks access to the 'net.

Re: unable to access internet from certain ip addresses

check the subnet mask in the NAT statement & ensure that it convers all the subnets.

The subnet from where you are browsing - It may not be under the NAT / subnet mask may be wrong.

New Member

Re: unable to access internet from certain ip addresses

Thanks for all the responses. I found that inside interface was setup with 24 bit netmask instead of 16 bit. After I changed the subnet mask, its working now.

Re: unable to access internet from certain ip addresses

I am glad we were able to help you in resolving your issue.

Please rate useful posts.

121
Views
0
Helpful
5
Replies
CreatePlease login to create content