Interfaces, Security Levels & Routing

⚠️ Interface 'administratively down' show ہو رہا ہے اور کوئی traffic نہیں گزر رہا۔Interface 'administratively down' show ho raha hai aur koi traffic nahi guzar raha.Interface shows 'administratively down' and no traffic passes.

✅ ASAv interfaces default طور پر shut down ہوتے ہیں — interface میں جائیں اور `no shutdown` چلائیں۔ `show interface ip brief` سے verify کریں۔ASAv interfaces default tor par shut down hote hain — interface mein jao aur `no shutdown` chalao. `show interface ip brief` se verify karo.ASAv interfaces are shut down by default — enter the interface and run `no shutdown`. Verify with `show interface ip brief`.

⚠️ Inside host outside gateway کو ping کر سکتا ہے لیکن internet سے reply نہیں آتا۔Inside host outside gateway ko ping kar sakta hai lekin internet se reply nahi ata.Inside host can ping the outside gateway but gets no reply from the internet.

✅ Check کریں default route موجود ہے (`show route`) اور NAT configured ہے (asa-04 میں) — NAT کے بغیر private source IP کا return path نہیں ہوتا۔Check karo default route mojood hai (`show route`) aur NAT configured hai (asa-04 mein) — NAT ke baghair private source IP ka return path nahi hota.Check the default route exists (`show route`) and that NAT is configured (covered in asa-04) — without NAT the private source IP has no return path.

⚠️ DMZ server inside سے reachable ہے لیکن outside interface سے نہیں۔DMZ server inside se reachable hai lekin outside interface se nahi.DMZ server is reachable from inside but not from the outside interface.

✅ یہ expected ہے: outside (level 0) سے DMZ (level 50) traffic default deny ہوتا ہے۔ Outside interface پر ACL چاہیے جو اسے permit کرے (asa-03)، اور ضرورت ہو تو NAT بھی۔Ye expected hai: outside (level 0) se DMZ (level 50) traffic default deny hota hai. Outside interface par ACL chahiye jo ise permit kare (asa-03), aur zaroorat ho to NAT bhi.That is expected: outside (level 0) to DMZ (level 50) traffic is denied by default. You need an ACL on the outside interface permitting it (asa-03) plus NAT if applicable.

❓ Security levels کے درمیان default traffic flow rules سمجھائیں۔Security levels ke darmiyan default traffic flow rules samjhao.Explain the default traffic flow rules between security levels.

Higher security level سے lower کی طرف traffic freely جاتا ہے (stateful — return traffic automatically allow ہوتا ہے)۔ Lower سے higher کی طرف traffic deny ہوتا ہے جب تک ACL explicitly permit نہ کرے۔Higher security level se lower ki taraf traffic freely jata hai (stateful — return traffic automatically allow hota hai). Lower se higher ki taraf traffic deny hota hai jab tak ACL explicitly permit na kare.Traffic flows freely from a higher security level to a lower one (stateful — return traffic is automatically allowed). Traffic from lower to higher is denied unless an ACL explicitly permits it.

❓ کیا same security level والے دو interfaces default طور پر communicate کر سکتے ہیں؟Kya same security level wale do interfaces default tor par communicate kar sakte hain?Can two interfaces with the same security level communicate by default?

نہیں۔ Same security level والے interfaces default طور پر آپس میں بات نہیں کر سکتے۔ `same-security-traffic permit inter-interface` command اسے enable کرتی ہے۔Nahi. Same security level wale interfaces default tor par aapas mein baat nahi kar sakte. `same-security-traffic permit inter-interface` command ise enable karti hai.Yes. Interfaces with the same security level cannot talk to each other by default. The command `same-security-traffic permit inter-interface` enables it.