ASA 5505 being used as a router only - allow everything

[ellisteph10]

Hi,

 

I urgently need to set up a spare ASA 5505 we have as a direct router between our external internet connection and our internal private network.

 

10.x.x.x Network -> Default Gateway ASA 10.x.x.3 -> 'outside' network 82.x.x.x

 

I have set as many Allow rules as I can but still cannot get anything from a 10.x.x.x system out onto the internet.

 

is there a way of just having the 5505 act as a simple router and allow everything back and forth?

 

Thanks,

E

[twin--turbo]

Does your ASA have the packet tracer?

 

Rob

[twin--turbo]

And have you configured dynamic nat from the inside interface to the outside? may be done automaticaly

 

Rob

[Bruce123]

And have you configured dynamic nat from the inside interface to the outside? may be done automaticaly

 

Rob

 

From memory you have to add a NAT rule explicitly on ASAs.

 

Also, why not disable the 'catch all' deny rule (assuming there is one).

 

Once you get oubound connections working, maybe start locking down outbound connections and setup inbound 'port forwarding' rules.

 

Sent using my Google Nexus S

 

 

 

Don't bother with