CISCO ASA 5505 firewall configuration

i need help for the basic configuration.
i can't configure my asa to communicate with my other network :

Internet---->routeur---->network1----> ASA5505

---

>network2

X.X.108.2--->X.X.108.0-->(X.X.108.23-X.X.1.1)-->X.X.1.0

I haven't internet and i can't communicate with the network 1
i have create rule to ping the network 2 and the ASA said :

[code:1]3 Apr 10 2007 07:28:28 305005 X.X.1.2 No translation group found for icmp src outside:X.X.108.142 dst inside:X.X.1.2 (type 8, code 0)[/code:1]

now i can ping the network 1 from network 2 but i can't ping network 2 from network 1 and i haven't internet.
Pleaaaaaase help me :oops:

By default the Pix (ASA) will allow communication from a high interface to a low interface (i.e. from inside to outside). Looking at the information, network1 is outside and network2 is inside ?

If thats the case i would have thought you would be able to ping from network 2 to network 1, not the other way around ?

What are you trying to acheive here ? Are you performing NAT or routing ? Have you made any changes already ?

Cheers

for the moment i can ping from network2 to network 1 (i've authorised icmp incoming and outgoing) to do this i have create a global pool for inside interface.

i would like to go to internet, my gateway for internet is on the network 1 (X.X.108.2), and i would like to access to my webserver in the network2 with my pc in the network 1.

i'm sorry but i'm a beginner. :oops:

i'm sorry but i'm a beginner. :oops:

Its no problem

Can you confirm, are you expecting to perform routing or NAT for this ? Also can you confirm my assumption on which outside/inside interfaces is attached to which network ?

It may also be easier if you can show us all the config. If you do a show config from the command line and past the config in this thread (please star out all passwords)

Cheers

Wayne

this is my conf

[code:1]
Result of the command: "sh conf"

: Saved
: Written by enable_15 at 09:53:20.548 UTC Fri Apr 6 2007
!
ASA Version 7.2(2)
!
hostname ciscoasa
domain-name default.domain.invalid
enable password *********** encrypted
names
!
interface Vlan1
nameif inside
security-level 100
ip address *.*.1.1 255.255.255.0
!
interface Vlan2
nameif outside
security-level 0
ip address *.*.108.23 255.255.255.0
!
interface Vlan3
nameif dmz
security-level 50
no ip address
!
interface Ethernet0/0
switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
passwd *************encrypted
ftp mode passive
dns server-group DefaultDNS
domain-name default.domain.invalid
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
pager lines 24
logging enable
logging asdm informational
mtu outside 1500
mtu inside 1500
mtu dmz 1500
no failover
monitor-interface outside
monitor-interface inside
monitor-interface dmz
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-522.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
http server enable
http *.*.108.142 255.255.255.255 outside
http *.*.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
!
dhcpd address *.*.1.2-*.*.1.254 inside
dhcpd enable inside
!

!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:*******************************
[/code:1]

more information in few minutes

edit :

Outside X.X.108.23 (network1)
Inside X.X.1.1 (network2)


Can you confirm, are you expecting to perform routing or NAT for this ? I'm not sur i have create 1 route : ip 0.0.0.0 mask 0.0.0.0 X.X.108.2 (adresse of my router). does that answer your question? (google translation inside lool)