Coming Soon: GET:IT Endpoint Management 1-Day Conference on September 28th at 9:30 AM ET Coming Soon: GET:IT Endpoint Management 1-Day Conference on September 28th at 9:30 AM ET

No Internet Access ASA

Home Forums Networking Cisco Security – PIX/ASA/VPN No Internet Access ASA

Viewing 1 post (of 1 total)
  • Author

  • Si_Pe

    Hi all,
    I am missing something really stupid here I think, I have an asa 5505 running 9.1 software, I am trying to use BT infinity broadband with it using an openreach modem connected on port 0. I have tested a direct connect with the openreach modem and the laptop using a pppoe connection and it connects and I can browse the internet ok.
    The only changes I have made to the factory config is below, the ASA can ping google DNS but my laptop cannot get out to the internet.
    I know it is a route issue but I cannot figure out what i need to change. I do not have a static IP from BT so I have left it to ip address pppoe
    Do i need to add a route outside? I have tried this but when I know the ip address the openreach picks up the route outside command fails with “Invalid next hop address, it belongs to one of our interfaces”
    The only changes made to factory config is below.
    hostname ASA-HOME
    enable password *****
    passwd *****
    username Test password ****** privilege 15
    interface Ethernet0/0
    switchport access vlan 2
    interface Ethernet0/1
    interface Ethernet0/2
    interface Ethernet0/3
    interface Ethernet0/4
    interface Ethernet0/5
    interface Ethernet0/6
    interface Ethernet0/7
    vpdn group BT request dialout pppoe
    vpdn group BT localname [email protected]
    vpdn group BT ppp authentication chap
    vpdn username [email protected] password ****
    interface Vlan1
    nameif inside
    security-level 100
    ip address
    interface Vlan2
    nameif outside
    security-level 0
    pppoe client vpdn group BT
    ip address pppoe
    dhcpd dns
    icmp permit any inside
    icmp permit any outside

    I am being stupid here but I can’t see why I can’t add the static route, I have tried to add “ip address pppoe setroute” but I then get an error of no route to host when trying to ping from the ASA.
    Any help would be appreciated.

Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.

Live Webinar: Active Directory Security: What Needs Immediate Priority!Live on Tuesday, October 12th at 1 PM ET

Attacks on Active Directory are at an all-time high. Companies that are not taking heed are being punished, both monetarily and with loss of production.

In this webinar, you will learn:

  • How to prioritize vulnerability management
  • What attackers are leveraging to breach organizations
  • Where Active Directory security needs immediate attention
  • Overall strategy to secure your environment and keep it secured

Sponsored by: