Basic Configuration Tutorial For the Cisco Asa 5505 Firewall

The Cisco Asa 5505 Firewall is the smallest model in the new 5500 Cisco series of hardware appliances. Although this model is convenient for small businesses, field offices or even home use, its firewall safety capabilities are the same as the biggest models (5510, 5520, 5540 etc). The Adaptive safety technology of the Asa firewalls offers solid and dependable firewall protection, industrialized application aware security, denial of service attack safety and much more. Moreover, the carrying out of the Asa 5505 appliance supports 150Mbps firewall throughput and 4000 firewall connections per second, which is more than sufficient for small networks.

Basic Configuration Tutorial For the Cisco Asa 5505 Firewall

Basic Configuration Tutorial For the Cisco Asa 5505 Firewall

---

Basic Configuration Tutorial For the Cisco Asa 5505 Firewall

Basic Configuration Tutorial For the Cisco Asa 5505 Firewall

In this record I will account for the basic configuration steps needed to setup a Cisco 5505 Asa firewall for connecting a small network to the Internet. We assume that our Isp has assigned us a static public Ip address (e.g 200.200.200.1 as an example) and that our internal network range is 192.168.1.0/24. We will use Port Address Translation (Pat) to translate our internal Ip addresses to the public address of the exterior interface. The discrepancy of the 5505 model from the bigger Asa models is that it has an 8-port 10/100 switch which acts as Layer 2 only. That is, you can not configure the corporeal ports as Layer 3 ports, rather you have to create interface Vlans and assign the Layer 2 interfaces in each Vlan. By default, interface Ethernet0/0 is assigned to Vlan 2 and it's the exterior interface (the one which connects to the Internet), and the other 7 interfaces (Ethernet0/1 to 0/7) are assigned by default to Vlan 1 and are used for connecting to the internal network. Let's see the basic configuration setup of the most foremost steps that you need to configure.

Step1: Configure the internal interface vlan
------------------------------------------------------
Asa5505(config)# interface Vlan 1
Asa5505(config-if)# nameif inside
Asa5505(config-if)# security-level 100
Asa5505(config-if)# ip address 192.168.1.1 255.255.255.0
Asa5505(config-if)# no shut

Step 2: Configure the external interface vlan (connected to Internet)
-------------------------------------------------------------------------------------
Asa5505(config)# interface Vlan 2
Asa5505(config-if)# nameif outside
Asa5505(config-if)# security-level 0
Asa5505(config-if)# ip address 200.200.200.1 255.255.255.0
Asa5505(config-if)# no shut

Step 3: Assign Ethernet 0/0 to Vlan 2
-------------------------------------------------
Asa5505(config)# interface Ethernet0/0
Asa5505(config-if)# switchport entrance vlan 2
Asa5505(config-if)# no shut

Step 4: Enable the rest interfaces with no shut
--------------------------------------------------
Asa5505(config)# interface Ethernet0/1
Asa5505(config-if)# no shut

Do the same for Ethernet0/1 to 0/7.

Step 5: Configure Pat on the exterior interface
-----------------------------------------------------
Asa5505(config)# global (outside) 1 interface
Asa5505(config)# nat (inside) 1 0.0.0.0 0.0.0.0

Step 6: Configure default route towards the Isp (assume default gateway is 200.200.200.2
---------------------------------------------------------------------------------------------------------
Asa5505(config)# route exterior 0.0.0.0 0.0.0.0 200.200.200.2 1

The above steps are the certainly indispensable steps you need to configure for making the appliance operational. Of policy there are much more configuration details that you need to implement in order to improve the safety and functionality of your appliance, such as entrance control Lists, Static Nat, Dhcp, Dmz zones, authentication etc.

Visit my website in my reserved supply box below for more information about Cisco products and solutions. You can also learn how to configure any Cisco Asa 5500 Firewall Here.

Basic Configuration Tutorial For the Cisco Asa 5505 Firewall

george foreman grill manual gr31sb Orange Juice Extractor

Cisco Ccnp / Bcmsn Exam Tutorial: Configuring PortFast And Bpdu Guard

In your Ccna studies, you learned about PortFast and the issue it can cause if configured on the wrong port! favorable only for switch ports related directly to a particular host, PortFast allows a port running Stp to go directly from blocking to forwarding mode.

A Cisco router will give you a warning when you configure PortFast:

Sw1(config)#int fast 0/5

Sw1(config-if)#spanning-tree portfast

%Warning: portfast should only be enabled on ports related to a
single host. Connecting hubs, concentrators, switches, bridges, etc...
to this interface when portfast is enabled, can cause temporary
bridging loops. Use with Caution

%Portfast has been configured on FastEthernet0/5 but will only

have follow when the interface is in a non-trunking mode.

Sw1(config-if)#

Not only will the switch warn you about the proper usage of PortFast, but you must put the port into entrance mode before PortFast will take effect.

Now, you'd think that would be sufficient of a warning, right? But there is a chance - just a chance - that someone is going to carry on to connect a switch to a port running Portfast. That could lead to two major problems, the first being the formation of a switching loop. Remember, the reason we have listening and studying modes is to help preclude switching loops. The next question is that there could be a new root bridge elected - and it could be a switch that isn't even in your network!

Bpdu Guard protects against this disastrous possibility. If any Bpdu comes in on a port that's running Bpdu Guard, the port will be shut down and placed into error disabled state, shown on the switch as err-disabled. A port placed in err-disabled state must be reopened manually.

Bpdu Guard is off on all ports by default, and is enabled as shown here:

Sw1(config)#int fast 0/5

Sw1(config-if)#spanning-tree bpduguard enable

It's a good idea to enable Bpdu Guard on any port you're running PortFast on. There's no cost in overhead, and it does preclude the possibility of a switch sending Bpdus into a port configured with PortFast - not to mention the possibility of a switch not under your control becoming a root switch to your network!

cisco router 2600

---

best george foreman grill

Cisco Ccna Exam Tutorial: Loopback Interfaces

As a Ccna candidate, you most likely have some background in Pc hardware and workstation support. If so, you're already familiar with loopback interfaces, particularly 127.0.0.1, the loopback address assigned to a Pc.

When you're studying all about the separate physical interfaces for your Ccna exam - serial, ethernet, and Bri, among others - there's one logical interface you need to know about, and that is - you guessed it! - the loopback interface.

Cisco Router

What isn't as immediately apparent is why we use loopback interfaces on routers and switches to begin with. Many of the Cisco router features that can use loopbacks are intermediate and advanced features that you'll learn about in your Ccnp and Ccie studies, but these features all come back to one basic concept: If the loopback interface on a router is down, that means the router is unavailable as a whole.

Cisco Ccna Exam Tutorial: Loopback Interfaces

In contrast, a physical interface being down does not mean the router itself is out of commission. A router's ethernet port can go down, but the other physical interfaces on that router are still operational. Since a loopback interface is logical, there's nothing physical that can go wrong with it.

As I mentioned, you'll learn separate Cisco router and switch features that use loopback interfaces as you climb the Cisco certification ladder. There's one misconception about Cisco loopback interfaces that you want to get clear on now, though. You're probably familiar with loopback interfaces on a Pc, and may even know that the address range 127.0.0.0 is reserved for loopback addressing.

Note that this reserved address range does not apply to loopbacks on Cisco devices, however. If you exertion to assign an address from this range to a Cisco loopback interface, you get this result:

R1#conf t

Enter configuration commands, one per line. End with Cntl/Z.

R1(config)#interface loopback0

R1(config-if)#ip address 127.0.0.2 255.255.255.0

Not a valid host address - 127.0.0.2

R1(config-if)#ip address 127.1.1.1 255.255.255.0

Not a valid host address - 127.1.1.1

The range 127.0.0.0 is reserved for host loopbacks (such as Pcs), not routers or switches. The most commonly used address from this range is 127.0.0.1 - if you can't ping that on a workstation, that means you can't ping yourself, which means there's a qoute with the Tcp/Ip install itself.
Keep these details in mind on the exam and in the workplace, and you're on your way to Ccna exam success!

Cisco Ccna Exam Tutorial: Loopback Interfaces

Gould Sump Pump 50hz 220v 5hp

Ccna / Ccnp Home Lab Tutorial: Assembling Your Cisco Home Lab

A Ccna or Ccnp candidate who wants to be totally prepared for their exams is going to put together a home lab to practice on. With used Cisco routers and switches more affordable and plentiful then ever before, there's unquestionably no excuse to not have one!

With the many dissimilar models available, there is some understandable blurring among hereafter Ccnas and Ccnps about which routers to buy and which ones to avoid. You can take approximately any set of Cisco routers and put together a home lab; part of the learning process is taking what equipment you have ready and putting together your own lab! For those of you preparation to start your home lab or add to your existing one, this description will list the routers I use in my Cisco pods. You unquestionably don't have to have all this equipment, but this will give you some good ideas on how to get started.

Cisco Router

The most versatile router you can get for your Ccna / Ccnp home lab is a 2520. These routers come with four serial ports, one ethernet port, and one Bri interface for Isdn practice. This mix of interfaces means you can unquestionably use it as a frame relay switch while using the ethernet and Bri ports for routing. (There is no problem with using a lab router as both your frame relay switch and a practice router; for a frame relay switch sample configuration, visit my website!)

Ccna / Ccnp Home Lab Tutorial: Assembling Your Cisco Home Lab

My pods consist of five routers and two switches, and three of the five routers are 2520s, due to their versatility. A up-to-date ebay quest showed these routers selling for - 5, an superior value for the practice you're going to get.

I also use 2501s in my home labs. These have fewer interfaces, but the composition of two serial interfaces and one ethernet interface allows you to get abundance of practice.

A composition that works very well is using three 2520s; one as my dedicated frame relay switch, one as R1, and an additional one as R2. Add a 2501 as R3, and you can have a frame cloud connecting R1, R2, and R3, a direct serial relationship in the middle of R1 and R3, an Ethernet segment that includes all three routers, and an Isdn relationship in the middle of R1 and R2 if you have an Isdn simulator. That composition will allow you to get a substantial estimate of practice for the exams, and you can all the time sell it when you're done!

2501s are very affordable, with many in the range on ebay. It's quite potential to get three 2520s and one 2501 for less than 0 total, and you can get most of that money back if you pick to sell it when you're done.

With four routers to work with, you're probably going to get tired of consuming that console cable around. An entrance server (actually a Cisco router, not the white boxes we tend to think of when we hear "server") will help you out with that. An entrance server allows you to set up a relationship with each of your other routers via an octal cable, which prevents you from consuming that console cable nearby continually. For an example of an entrance server configuration, just visit my website and look in the "Free Training" section.

Access server prices vary quite a bit; don't panic if you do an ebay quest and see them costing thousands of dollars. You do Not need an expensive entrance server for your Ccna / Ccnp home lab. 2511s are great routers to get for your entrance server.

One examine I get often from Ccna / Ccnp candidates is "What routers should I buy that I can still use when I'm ready to study for the Ccnp?" The Ccie lab changes regularly and sometimes drastically when it comes to the equipment you'll need. while my Ccie lab studies, I found that renting time from online rack rental providers was unquestionably the best way to go. Don't hesitate when putting your Ccna / Ccnp home lab together, wondering what will be standard for the Ccie lab a year or so from now. None of us know what's going to be on that equipment list, so get the Ccna and Ccnp first - by building your own Cisco home lab!

Ccna / Ccnp Home Lab Tutorial: Assembling Your Cisco Home Lab

who makes the giant hydraulic crusher Batman 20th Anniversary