i am new asa and cisco as well , what i am trying to do to perform this lab , only 1 issue is there , i need help in it, i can ping from pc0 to router0 in other way I can ping inside to outside , but i cant ping from router to pc0 , in other way i cant ping outside to inside, I don't know the how to add this rule on asa i perform Nat for inside to outside can some one help me in this.(Note! nothing is configure on switch
its just a unmanagged switch but i need it for my lab. thank you.
This is my Topology :
running config on asa :
interface GigabitEthernet1/1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
!
interface GigabitEthernet1/2
nameif outside
security-level 0
ip address 10.1.1.2 255.255.255.0
!
object network INSIDE
subnet 192.168.1.0 255.255.255.0
!
route outside 0.0.0.0 0.0.0.0 10.1.1.1 1
!
!
!
object network INSIDE
nat (inside,outside) dynamic interface
!
!
!
!
class-map inspection_default
match default-inspection-traffic
!
policy-map global_policy
class inspection_default
inspect icmp
!
service-policy global_policy global
I Perfrom these commands on ASA
, the switch
is just unmanaged
nothing is configured on it, and i also enable dhcp
on ASA
subnet 192.168.1.10-192.168.1.20
# object network INSIDE
This NAT is for the inside subnet, the private network
# subnet 192.168.1.0 255.255.255.0
Now, I will configure NAT
# nat (inside,outside) dynamic interface
# conf t
# class-map inspection_default
# match default-inspectioin-traffic
# exit
# policy-map globac_policy
Specify the class i created
# class inspection_default
# inspect icmp
# exit
I will enable the service policy
# service-policy global_policy global