Basic Configuration Tutorial For the Cisco Asa 5505 Firewall
The Cisco Asa 5505 Firewall is the smallest model in the new 5500 Cisco series of hardware appliances. Although this model is convenient for small businesses, field offices or even home use, its firewall safety capabilities are the same as the biggest models (5510, 5520, 5540 etc). The Adaptive safety technology of the Asa firewalls offers solid and dependable firewall protection, industrialized application aware security, denial of service attack safety and much more. Moreover, the carrying out of the Asa 5505 appliance supports 150Mbps firewall throughput and 4000 firewall connections per second, which is more than sufficient for small networks.
Basic Configuration Tutorial For the Cisco Asa 5505 Firewall
Basic Configuration Tutorial For the Cisco Asa 5505 Firewall
Basic Configuration Tutorial For the Cisco Asa 5505 Firewall
Basic Configuration Tutorial For the Cisco Asa 5505 Firewall
In this record I will account for the basic configuration steps needed to setup a Cisco 5505 Asa firewall for connecting a small network to the Internet. We assume that our Isp has assigned us a static public Ip address (e.g 200.200.200.1 as an example) and that our internal network range is 192.168.1.0/24. We will use Port Address Translation (Pat) to translate our internal Ip addresses to the public address of the exterior interface. The discrepancy of the 5505 model from the bigger Asa models is that it has an 8-port 10/100 switch which acts as Layer 2 only. That is, you can not configure the corporeal ports as Layer 3 ports, rather you have to create interface Vlans and assign the Layer 2 interfaces in each Vlan. By default, interface Ethernet0/0 is assigned to Vlan 2 and it's the exterior interface (the one which connects to the Internet), and the other 7 interfaces (Ethernet0/1 to 0/7) are assigned by default to Vlan 1 and are used for connecting to the internal network. Let's see the basic configuration setup of the most foremost steps that you need to configure.
Step1: Configure the internal interface vlan
------------------------------------------------------
Asa5505(config)# interface Vlan 1
Asa5505(config-if)# nameif inside
Asa5505(config-if)# security-level 100
Asa5505(config-if)# ip address 192.168.1.1 255.255.255.0
Asa5505(config-if)# no shut
Step 2: Configure the external interface vlan (connected to Internet)
-------------------------------------------------------------------------------------
Asa5505(config)# interface Vlan 2
Asa5505(config-if)# nameif outside
Asa5505(config-if)# security-level 0
Asa5505(config-if)# ip address 200.200.200.1 255.255.255.0
Asa5505(config-if)# no shut
Step 3: Assign Ethernet 0/0 to Vlan 2
-------------------------------------------------
Asa5505(config)# interface Ethernet0/0
Asa5505(config-if)# switchport entrance vlan 2
Asa5505(config-if)# no shut
Step 4: Enable the rest interfaces with no shut
--------------------------------------------------
Asa5505(config)# interface Ethernet0/1
Asa5505(config-if)# no shut
Do the same for Ethernet0/1 to 0/7.
Step 5: Configure Pat on the exterior interface
-----------------------------------------------------
Asa5505(config)# global (outside) 1 interface
Asa5505(config)# nat (inside) 1 0.0.0.0 0.0.0.0
Step 6: Configure default route towards the Isp (assume default gateway is 200.200.200.2
---------------------------------------------------------------------------------------------------------
Asa5505(config)# route exterior 0.0.0.0 0.0.0.0 200.200.200.2 1
The above steps are the certainly indispensable steps you need to configure for making the appliance operational. Of policy there are much more configuration details that you need to implement in order to improve the safety and functionality of your appliance, such as entrance control Lists, Static Nat, Dhcp, Dmz zones, authentication etc.
Visit my website in my reserved supply box below for more information about Cisco products and solutions. You can also learn how to configure any Cisco Asa 5500 Firewall Here.
Basic Configuration Tutorial For the Cisco Asa 5505 Firewall
No comments:
Post a Comment