asa 5505 not nat problem

asa 5505 not nat problem

NewsGroups | Search | Tools
 comp.dcom.sys.cisco  Post an article  get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content  add this group's latest topics to your Google content  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
asa 5505 not nat problem richard pijlgroms 03-27-2008
Posted by richard pijlgroms on March 27, 2008, 6:06 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello,

We try to install a 5505 with no nat-control. We have public addresses
(subnet) for outside and public for inside. But we cannot route between
the two interfaces. We turn off nat-control and we removed all nat
lines.
We put in an ACL to allow traffic from outside to inside. (outside sec=0
inside sec=100) But in the syslogs we get the message while doing an
ping or trace from the ASDM tools: unable to get next hop for
xx.xx.xx.xx where xx is on our inside interface. We only put in a static
route for the outside interface. 0.0.0.0/24 to next hop.

The asa is on a dmz_restricted license. Can that be the problem ? Or are
we missing something ??

We are using pix 506 for a while like this but the asa is a little
different in this

Posted by richard pijlgroms on March 27, 2008, 6:47 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

1 strange behauvior: we opened up the telnet on the outside interface
but we get connected but no login string.

asdm works perfect, we can manage only from outside.

Similar ThreadsPosted
Problem with VPN on ASA 5505 November 21, 2007, 3:49 pm
asa 5505 vpn problem October 8, 2008, 9:56 am
asa 5505 static pat problem April 25, 2007, 4:43 pm
asa 5505 static pat problem April 25, 2007, 4:45 pm
asa 5505 static pat problem April 25, 2007, 5:29 pm
ASA 5505 problem with smtp May 5, 2008, 8:42 am
ASA 5505 as hardware vpn client to PIX 501 or ASA 5505 with network extension mode activated June 16, 2007, 8:21 am
5505 - IPS/IDS July 9, 2007, 5:42 pm
ASA 5505 help July 16, 2007, 11:54 am
Cisco ASA 5505 - please help December 3, 2007, 8:28 am

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com

Contact Us | Privacy Policy
The site map in XML format XML site map