Thanks for the reply's, I have added the above lines and still no luck. I am using Microsoft IAS server configured exactly to the following cisco doc:
http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807213a7.shtml
NetworkGhost,
Thank you so much for your reply, I added the line however I still recieve the same error. The weird thing is I can ping the 209.***.***.118 interface address after connect. I can also ping the 192.168.10.253 but the 209.***.***.118 interface issues the reply back. Anything...
Update: I turned on logging and am recieving this message when I try to ping an internal server. I have no clue on what ACL this is accessing for this.
109025 192.168.40.1 192.168.10.9 Authorization denied (acl=) for user 'testuser' from 192.168.40.1/1026 to 192.168.10.9/53 on interface...
...do is VPN in to connect to servers and allow local web surfing.
ASA Version 8.0(2)
!
hostname ciscoasa
domain-name mydomain.org
enable password ***********. encrypted
names
!
interface Ethernet0/0
nameif Inside
security-level 50
ip address 192.168.10.253 255.255.255.0
!
interface...
...I do I can not figure it out. Can someone please help me or point me in the right direction.
ASA Version 8.0(2)
!
hostname ciscoasa
domain-name ******
enable password ************. encrypted
names
!
interface Ethernet0/0
nameif Inside
security-level 50
ip address 192.168.10.253...
...255.255.254.0 Ethernet0/1
ip route 209.x.x.0 255.255.255.0 209.x.x.118
access-list 1 permit any
snmp-server community public RO
banner exec ^C
*************************************************************************...
We are using 192.168.10.x and 192.168.11.x which is the reason for the 255.255.254.0 netmask
when I remove the global (outside) 1 209.x.x.119 and replace it with the global (outside) 1 209.x.x.118 i get
Error: 209.x.x.118-209.x.x.118 overlaps with Outside interface address
Greetings,
I am new to the PIX / ASA hardware and I am trying to setup our new ASA to allow traffic to our web server. We have 8 IP's 209.x.x.112 255.255.255.248.
Our edge router is 209.x.x.113 and the ASA external interface is 209.x.x.118. I am wanting to use 209.x.x.119 as our main site IP...
does this help any
New Site - 192.168.10.254, 10.10.30.10 (Ethernet 0/1)
all traffic for 192.168.x to Main Site
all traffic for 10.10.10.x to Main Site
all traffic for 10.10.20.x to Main Site then Remote Site
all traffic for 10.24.15.x to Main Site then to 192.168.1.30
all all other traffic...
We were passing the 0.0.0.0 route to Serial 0/0 and internet was passing to remote site and being forwarded on
If I change 0.0.0.0 to route Serial 0/1 I cannot get out
I still need to be able to send 10.x and 192.x traffic over Serial 0/0 but all internet traffic needs to go out serial 0/1...
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.