Cisco ASA Security Task
On Router1:
enable
conf t
hostname Router1.
int G0/1
ip address 8.8.8.1 255.255.255.0
no shut
int G0/0
ip address 10.1.1.1 255.255.255.252
no shut
On the ASA
enable
enter no password is configured yet
conf t
hostname ASA5506
enable password cisco
conf t
domain-name ccna.com
username Admin1 password cisco
show run
On ASA5506:
conf t
int G1/1
no ip address 192.168.1.1 255.255.255.0
no nameif
no security-level 100
int G1/2
no ip address dhcp
no nameif
no security-level 0
On ASA5506:
int G1/1
ip address 10.1.1.1 255.255.255.252
nameif outside
security-level 0
no shut
int ma1/1
ip address 192.168.1.1 255.255.255.0
nameif inside
security-level 100
no shut
show interface ip brief
show ip address
dhcp address 192.168.1.10-192.168.1.20 inside
dhcp dns 8.8.8.8
dhcp option 3 ip 192.168.1.1
dhcp enable inside
On ASA5506:
conf t
route outside 0.0.0.0 0.0.0.0 10.1.1.2
object network INSIDE
subnet 192.168.1.0 255.255.255.0
nat (inside,outside) dynamic interface
exit
show nat
On PC-A:
ping 8.8.8.8
On ASA5506:
conf t
class-map inspection_default
match default-inspectioin-traffic
exit
policy-map globac_policy
class inspection_default
inspect icmp
exit
service-policy global_policy global
On PC-A:
ping 8.8.8.8
On PC-B.
Web browser 8.8.8.8
On ASA5506:
conf t
policy-map global_policy
class inspection_default
inspect http
show run
On PC-A:
ping www.ccna.com
On the ASA5506:
conf t
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
exit
policy-map global_policy
class inspection_default
inspect dns preset_dna_map
exit
show run
On PC-2:
ping www.ccna.com
On ASA5506:
conf t
aaa authentication ssh console local
crypto key generate rsa modulus 1024
yes
conf t
ssh 192.168.1.0 255.255.255.0 inside
ssh timeout 10
• Cisco ASDM : Configure Internet Access on ...
• ASA 5506 Configuring basic settings, Pract...
• 05.2- Cisco ASA Firewall - Basic ASA Conne...
• Configuration of Cisco ASA Firewall