ASA5505: Intelligently set the default route to ISP’s gateway.
Wow… this ASA5505 has a command that conveniently set the default route to my ISP’s gateway.
ciscoasa(config)# int vlan 2
ciscoasa(config-if)# ip add
ciscoasa(config-if)# ip address dhcp ?
interface mode commands/options:
setroute Keyword to set the default route using the default gateway
parameter the DHCP server returns
<cr>
ciscoasa(config-if)# ip address dhcp setroute ?
ciscoasa(config)# sh route
Gateway of last resort is 116.88.114.1 to network 0.0.0.0
C 116.88.114.0 255.255.254.0 is directly connected, outside
C 192.168.1.0 255.255.255.0 is directly connected, inside
d* 0.0.0.0 0.0.0.0 [1/0] via 116.88.114.1, outside
ciscoasa(config)# ping 116.88.114.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 116.88.114.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/10/20 ms
Translated the any inside source addresses to the public ip address, and the translation was done on the outside interface.
ciscoasa(config)# sh run nat
nat (inside) 1 0.0.0.0 0.0.0.0 dns
ciscoasa(config)# sh run global
global (outside) 1 interface
I can even ping to google…so is that supposed to mean I can surf the net behind the firewall box?
ciscoasa(config)# ping 74.125.71.147
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 74.125.71.147, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 40/46/50 ms