0

i am new asa and cisco as well , what i am trying to do to perform this lab , only 1 issue is there , i need help in it, i can ping from pc0 to router0 in other way I can ping inside to outside , but i cant ping from router to pc0 , in other way i cant ping outside to inside, I don't know the how to add this rule on asa i perform Nat for inside to outside can some one help me in this.(Note! nothing is configure on switch its just a unmanagged switch but i need it for my lab. thank you.

This is my Topology :

Topology

running config on asa :

  interface GigabitEthernet1/1
     nameif inside
     security-level 100
     ip address 192.168.1.1 255.255.255.0
    !
    interface GigabitEthernet1/2
     nameif outside
     security-level 0
     ip address 10.1.1.2 255.255.255.0
    !
    object network INSIDE
    subnet 192.168.1.0 255.255.255.0
    !
    route outside 0.0.0.0 0.0.0.0 10.1.1.1 1
    !
    !
    !
    object network INSIDE
    nat (inside,outside) dynamic interface
    !
    !
    !
    !
    class-map inspection_default
    match default-inspection-traffic
    !
    policy-map global_policy
    class inspection_default
    inspect icmp 
    !
    service-policy global_policy global

I Perfrom these commands on ASA , the switch is just unmanaged nothing is configured on it, and i also enable dhcp on ASA subnet 192.168.1.10-192.168.1.20

# object network INSIDE
This NAT is for the inside subnet, the private network
# subnet 192.168.1.0 255.255.255.0
Now, I will configure NAT
# nat (inside,outside) dynamic interface
# conf t
# class-map inspection_default
# match default-inspectioin-traffic
# exit
# policy-map globac_policy
Specify the class i created
# class inspection_default
# inspect icmp
# exit
I will enable the service policy
# service-policy global_policy global
  • You're using NAT, so 192.168.1.0/24 doesn't exist outside the LAN. If you turn off NAT (pure routing), and tell things outside the LAN where 192.168.1.0/24 is, there are various ways to permit traffic from a lower security level to a higher security level. – Ricky Nov 26 '20 at 15:02
  • @Ricky can u demonstrate a small piece of code . – Logitech Flames Nov 26 '20 at 16:51

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.