Skip navigation.

Problem in configuring Cisco 5510 ASA Firewall

I have configured the firewall & tried to access the outside network which is working fine but the Outside Network is not able to access the Internal NATTED IP.

Can any one help me out inf configuration.this is my Config.

asdm image disk0:/asdm-507.bin
asdm location RTGSNODE1 Inside
asdm location RTGSNODE2 Inside
asdm location RTGSCLUSTER Inside
no asdm history enable
: Saved
ASA Version 7.0(7)
hostname ciscoasa
domain-name default.domain.invalid
enable password encrypted
interface Ethernet0/0
nameif Outside
security-level 0
ip address
interface Ethernet0/1
nameif Inside
security-level 100
ip address
interface Ethernet0/2
no nameif
no security-level
no ip address
interface Ethernet0/3
no nameif
no security-level
no ip address
interface Management0/0
nameif management
security-level 100
ip address
passwd 2KFQnbNIdI.2KYOU encrypted
ftp mode passive
access-list Inside_nat0_outbound extended permit ip any any
access-list Outside_nat0_inbound extended permit ip any any
access-list Outside_access_in extended permit tcp any
access-list outside_access_in permit icmp any any echo-reply
access-list Outside_access_in extended permit ip any
pager lines 24
logging asdm informational
mtu Outside 1500
mtu Inside 1500
mtu management 1500
no failover
monitor-interface Outside
monitor-interface Inside
monitor-interface management
icmp permit any Outside
icmp permit any Inside
asdm image disk0:/asdm-507.bin
no asdm history enable
arp timeout 14400
global (Outside) 1 netmask
nat (Outside) 0 access-list Outside_nat0_inbound outside
nat (Inside) 0 access-list Inside_nat0_outbound
nat (Inside) 1 RTGSNODE1
nat (Inside) 1 RTGSNODE2
nat (Inside) 1 RTGSCLUSTER
static (Inside,Outside) RTGSNODE1 netmask
static (Inside,Outside) RTGSNODE2 netmask
static (Inside,Outside) RTGSCLUSTER netmask
access-group Outside_access_in in interface Outside
route Outside 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00
timeout mgcp-pat 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
http server enable
http management
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd address management
dhcpd lease 3600
dhcpd ping_timeout 50
class-map inspection_default
match default-inspection-traffic
policy-map global_policy
class inspection_default
inspect dns maximum-length 512
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
service-policy global_policy global
: end

Your problem might well be

Your problem might well be with your access-lists. Your acls are as follows:
access-list Outside_access_in extended permit tcp any
access-list Outside_access_in extended permit ip any

From outside to inside you are showing your inside network ip address. Your inside network ip addresses are private IP Addresses. So I would suggest that you use public or the NATed (static) ip addresses on your outside access lists compared to the internal network IP Addresses.