I have those 3 Interfaces configured:
interface GigabitEthernet0/0 nameif outside security-level 0 ip address PUBLICIP 255.255.255.240 ! interface GigabitEthernet0/1 nameif inside security-level 100 ip address 10.0.0.1 255.255.255.0 ! interface GigabitEthernet0/3 no nameif security-level 100 ip address 220.127.116.11 255.255.255.0 ! interface GigabitEthernet0/3.99 vlan 99 nameif servers security-level 100 ip address 172.16.18.1 255.255.255.0 !
also I have a default route
route outside 0.0.0.0 0.0.0.0 ISP_GATEWAY 1
and these NAT Rules
nat (inside,servers) source static any any nat (inside,outside) source static any interface unidirectional description Internetaccess
enable traffic between two or more interfaces which are configured with same security levels
enable traffic between two or more hosts connected to the same interface
I am able to go on the internet with the "inside" network. But I can't ping the Gateway 172.16.18.1. Also, i have a client on Interface 3 connected with the ip 172.16.18.168/24 with the gateway 172.16.18.1. This client is alsp not able to ping 172.16.18.1.
In ASDM, I'm able to ping the Gateway from the servers interface. What am I missing? I read here that i have to configure for every VLAN I have, a NAT-Statement. Is this true? Because I need 10 VLANs.
I can't figure out what I'm missing. When I do Packet tracer in ASDM no ACL seems to block it.
PS: the two clients are directly connected to the ports. PS:PS: I am configuring 80% over ASDM and 20% over CLI (the way I learned in school).