ASA 5505 can't communicate with CISCO ASR1001-X

[diego.corral]

Hello everybody.

Thanks for your support. I hope somebody can help me.

My company have a firewall CISCO ASA 5505, and recently we bought the router CISCO ASR1001-X.

The problem is that we can't communicate between both systems.

The ASA don't have restriction in ICMP, TCP, etc.

The interfaces are in the same network.

I don't know if, perhaps, both system have any incompatibility, or I need a specific level of firmware.

I have no idea

Thanks and sorry, I need improve my english

[Seb Rupik]

Hi there,

Are you able to provide the running config of the two devices?

cheers,

Seb.

[diego.corral]

Hi Seb
lamentably I haven't access to the running config at the moment. I will try
to get it, but the ASR device is currently "out of office".
The ASA device is working with another Router (Juniper) and is working fine.

I did this test:
- I replace the ASR1001X with a Laptop and the ASA can communicate with the
laptop
- Also, I connect the same Laptop, with the network configuration of ASA to
the ASR, and the router can communicate with the laptop

Thanks

[Seb Rupik]

Does the network configuration of the laptop remain static as it is moved between the ASA and ASR interface?

[diego.corral · Accepted solution]

The problem was more simple. The Cisco ASR have ethernet ports 100/1000/10k, and the Cisco ASA have fast Ethernet (10/100).

For the negotiation between both system, we must force the ASR to 100.

Thanks everybody for your support