Tuesday, December 1, 2020

Inside address cannot ping ASA outside address despite having a route in the routing table on the inside route and on the ASA. No ACLs are configured either.

Router 1 in the brown box (topology image) is unable to ping 209.10.10.2, at first I thought it was something wrong with my static routing, I'm admittedly always bad at remembering what is my next-hop. But Router1 neighbors with ASA's G1/3 interface when I configure OSPF on both of them.

I'm not sure if there's something I'm missing about ASA's or if it's an issue with packet tracer.

ciscoasa#show route Gateway of last resort is 209.10.10.1 to network 0.0.0.0 172.16.0.0/24 is subnetted, 2 subnets C 172.16.0.0 255.255.255.0 is directly connected, inside, GigabitEthernet1/1 C 172.16.100.0 255.255.255.0 is directly connected, inside, GigabitEthernet1/1 209.10.10.0/30 is subnetted, 1 subnets C 209.10.10.0 255.255.255.252 is directly connected, outside, GigabitEthernet1/3 S* 0.0.0.0/0 [1/0] via 209.10.10.1 ciscoasa#show access-list access-list cached ACL log flows: total 0, denied 0 (deny-flow-max 4096) alert-interval 300 ciscoasa# ciscoasa#show nat Auto NAT Policies (Section 2) 1 (inside) to (outside) source dynamic inside-net interface translate_hits = 0, untranslate_hits = 0 ciscoasa#show run : Saved : ASA Version 9.6(1) ! hostname ciscoasa names ! interface GigabitEthernet1/1 nameif inside security-level 0 ip address 172.16.100.1 255.255.255.0 ! interface GigabitEthernet1/3 nameif outside security-level 0 ip address 209.10.10.2 255.255.255.252 ! interface Management1/1 management-only no nameif no security-level no ip address ! object network inside-net subnet 172.16.100.0 255.255.255.0 ! route outside 0.0.0.0 0.0.0.0 209.10.10.1 1 ! object network inside-net nat (inside,outside) dynamic interface ! telnet timeout 5 ssh timeout 5 ! router ospf 1 log-adjacency-changes router-id 3.3.3.3 network 209.10.10.0 255.255.255.252 area 0 network 172.16.100.0 255.255.255.0 area 0 default-information originate ! 

Router(config)#do show ip route Gateway of last resort is not set 172.16.0.0/16 is variably subnetted, 4 subnets, 3 masks C 172.16.80.0/30 is directly connected, GigabitEthernet0/1 L 172.16.80.2/32 is directly connected, GigabitEthernet0/1 C 172.16.100.0/24 is directly connected, GigabitEthernet0/0 L 172.16.100.2/32 is directly connected, GigabitEthernet0/0 209.10.10.0/30 is subnetted, 1 subnets O 209.10.10.0/30 [110/2] via 172.16.100.1, 00:04:30, GigabitEthernet0/0 O*E2 0.0.0.0/0 [110/1] via 172.16.100.1, 00:04:30, GigabitEthernet0/0 Router# show ip ospf neighbor Neighbor ID Pri State Dead Time Address Interface 3.3.3.3 1 FULL/DR 00:00:36 172.16.100.1 GigabitEthernet0/0 


No comments:

Post a Comment