ASA 5510 Basic Config

[m3the01]

So been out of the game for nearly 8 years, primarily a programmer now.

Trying to help a buddies company out configuring a ASA 5510,

What im trying to do,
1)internet pass through, pretty sure i did this with NAT before. They have one static-ip that ive configured.
2)DNS functionality, ie) if the local dns server cant resolve the name forward the request to the external ISP's DNS server. Im pretty sure this is just the order i list the dns servers but cant fully remember.
3)VPN from outside to inside in order to connect to a mysql server
4)pretty sure i need to state a static route for the default gateway of the ISP.
5)thats it thats all...

Any help with commands would great be appreciated!

I tried the web interface, set the security level of the outside static interface to 0 and inside static interface to 100 and the ip-addresses. Then setup NAT but i still can hit the web. I verifed by pinging using the web interface i can hit outside addresses but other than that im a little lost and out of my league.

Thanks for the help,

I will upload a config file tuesday morning,

Thanks again!

 

[m3the01]

For the life of me i can get any client workstations on the internet.

Here is the config file,

Result of the command: "show running-config"

: Saved
:
ASA Version 7.0(7)
!
...
policy-map global_policy
class inspection_default
inspect dns maximum-length 512
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
!
service-policy global_policy global
Cryptochecksum:f2f318953596a9794d7f418688325726
: end

 

[m3the01]

I have also tried to use the same pool id and a route outside metric of 1,

global (OUTSIDE) 200 interface
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 0 access-list LAN1_nat0_inbound outside
nat (inside) 200 0.0.0.0 0.0.0.0
route OUTSIDE 0.0.0.0 0.0.0.0 xxx.179.192.1 1

The route outside is simply the default route when i do a ipconfig /all on a windows box. I assume this is the correct route.

Please help!

 

[desperado618]

Please make sure that the contents of the 2 nat 0 acl's (inside_nat0 and LAN1_nat0_inbound) do not contain the internet destined traffic.

It would be helpful if you could either post the entire scrubbed config or atleast a copy of your "sh log" and "sh xlate" while attempting to connect.

http://www.NetLeets.com

IT Security news and information
In plain English

 

[m3the01]

Thanks a lot i will post the updated scrubbed config files,

Please let me know if anything looks out of place or should concern me.

Everything in terms of VPN and inside->outside traffic seems to be working. VPN-clients can only hit the sql server, which is desired.