Cisco ASA 5506-X (SOHO)
Hi and welcome to this video which is part of the Cisco ASA 5506-X Configuration Basics series.
During this video I'll be showing you how to configure the ASA 5506-X firewall, connecting a single inside LAN subnet to the outside WAN or
Internet router.
We start by ensuring we have a clean configuration, preventing Cisco's default or any previous configuration entries creating problems later on.
You can find a full copy of the configuration used below, including brief explanation of the commands used.
------------------------------------------------------------------------------------------
! Full configuration used shown below.
!
wr erase
! deletes configuration
!
reload
! Proceed with reload, hit enter to confirm
!
enable
!
conf t
!
terminal width 350
! This is so you can see the full command (optional)
!
hostname northfirewall
! You can enter any hostname you like
!
interface GigabitEthernet1/1
description out to internet
nameif talktalk
security-level 0
ip address 1.1.1.2 255.255.255.128
no shut
! This is my outside interface
!
interface GigabitEthernet1/2
description home network
nameif homenetwork
security-level 100
ip address 192.168.1.1 255.255.255.0
no shut
! This is my inside interface for my network
!
route talktalk 0.0.0.0 0.0.0.0 1.1.1.1
! This is the default route out via my outside interface
!
nat (homenetwork,talktalk) after-auto source dynamic any interface
! Enable NAT from the inside to the outside interface
!
dhcpd address 192.168.1.100-192.168.1.150 homenetwork
dhcpd dns 208.67.222.222 208.67.220.220 interface homenetwork
dhcpd enable homenetwork
! The Above is the DHCP pool for my home network
! 208.67.222.222 & 208.67.220.220 are public DNS servers
!
dns domain-lookup talktalk
! This enables DNS lookup via my outside interface
!
dns server-group DefaultDNS
name-server 208.67.222.222 208.67.220.220 talktalk
domain-name fivenines.org.uk
! This is to enable DNS lookup from the ASA firewall
!
policy-map global_policy
class inspection_default
inspect icmp
inspect icmp error
! Enables ping testing to outside hosts
!
username cisco password P@55word01 privilege 15
! This configures a local administrator named cisco
!
enable password P@55word01
! This configures the enable password
!
end
wr mem
! This saves the configuration
------------------------------------------------------------------------------------------
! To Test Connectivity
ping 208.67.222.222
! Sends a ping to the external open DNS server
ping www.uboot.com
! Sends a ping to an external website to check dns
------------------------------------------------------------------------------------------
That brings this presentation to an End...
If you enjoyed it, better still if you learnt from it then please subscribe and till the next time, by for now...