Basic Configuration Tutorial For the Cisco ASA 5510 Firewall

Continuing our series of articles about Cisco ASA 5500 firewalls, I'm offering you here a basic configuration tutorial for the Cisco ASA 5510 security appliance. This device is the second model in the ASA series (ASA 5505, 5510, 5520 etc) and is fairly popular since is intended for small to medium enterprises. Like the smallest ASA 5505 model, the 5510 comes with two license options: The Base license and the Security Plus license. The second one (security plus) provides some performance and hardware enhancements over the base license, such as 130,000 Maximum firewall connections (instead of 50,000), 100 Maximum VLANs (instead of 50), Failover Redundancy, etc. Also, the security plus license enables two of the five firewall network ports to work as 10/100/1000 instead of only 10/100.

Next we will see a simple Internet Access scenario which will help us understand the basic steps needed to setup an ASA 5510. Assume that we are assigned a static public IP address 100.100.100.1 from our ISP. Also, the internal LAN network belongs to subnet 192.168.10.0/24. Interface Ethernet0/0 will be connected on the outside (towards the ISP), and Ethernet0/1 will be connected to the Inside LAN switch.

The firewall will be configured to supply IP addresses dynamically (using DHCP) to the internal hosts. All outbound communication (from inside to outside) will be translated using Port Address Translation (PAT) on the outside public interface. Let's see a snippet of the required configuration steps for this basic scenario:

Step1: Configure a privileged level password (enable password)

By default there is no password for accessing the ASA firewall, so the first step before doing anything else is to configure a privileged level password, which will be needed to allow subsequent access to the appliance. Configure this under Configuration Mode:

ASA5510(config)# enable password mysecretpassword

Step2: Configure the public outside interface

ASA5510(config)# interface Ethernet0/0

ASA5510(config-if)# nameif outside

ASA5510(config-if)# security-level 0

ASA5510(config-if)# ip address 100.100.100.1 255.255.255.252

ASA5510(config-if)# no shut

Step3: Configure the trusted internal interface

ASA5510(config)# interface Ethernet0/1

ASA5510(config-if)# nameif inside

ASA5510(config-if)# security-level 100

ASA5510(config-if)# ip address 192.168.10.1 255.255.255.0

ASA5510(config-if)# no shut

Step 4: Configure PAT on the outside interface

ASA5510(config)# global (outside) 1 interface

ASA5510(config)# nat (inside) 1 0.0.0.0 0.0.0.0

Step 5: Configure Default Route towards the ISP (assume default gateway is 100.100.100.2)

ASA5510(config)# route outside 0.0.0.0 0.0.0.0 100.100.100.2 1

Step 6: Configure the firewall to assign internal IP and DNS address to hosts using DHCP

ASA5510(config)# dhcpd dns 200.200.200.10

ASA5510(config)# dhcpd address 192.168.10.10-192.168.10.200 inside

ASA5510(config)# dhcpd enable inside

The above basic configuration is just the beginning for making the appliance operational. There are many more configuration features that you need to implement to increase the security of your network, such as Static and Dynamic NAT, Access Control Lists to control traffic flow, DMZ zones, VPN etc.

Visit my website in my resource box below for more information about Cisco products and solutions. You can also learn how to configure any Cisco ASA 5500 Firewall Here (applicable for ALL ASA models running software versions 7.x and 8.x).

free design software

Continuar leyendo

Ocultar articulo

IPv6 Training (Cisco) Enabling Telnet on an IPv6 router and Telnet configuration

Well, if you do not know the word "telnet" telnet is an application layer protocol that allows direct connections (with telnet sessions), can do to a Cisco router or a Cisco router. It does not matter if you use the IPv4 or the IPv6 protocol, "telnet", leads the same way.

A network administrator can "telnet" to make the following types of direct connections (telnet sessions):


To accommodateRouter
Router to router
Router-to-Host

This article will show you how to enable "telnet" IPv6 on a Cisco router, so as to be able to connect directly via telnet sessions with him, and I also show how you can initiate a "telnet" session from a Cisco router IPv6.

Here are the steps needed to "telnet" to enable IPv6 on a Cisco router:

1 Router> enable
2 Router # configure terminal
3 Router (config) # IPv6 host name [port] ipv6-address1 [ipv6-address2 ... ipv6-address4]
4 Router (config) # line [aux | console | tty | vty] line number [ending-line-number]
5 Router (config-line) # password password
6 Router (config-line) # login [local | TACACS]
7 Router (config-line) # ipv6 ipv6-access-class access-list-name {in | out}
8 Router (config-line) # end
9 Router # copy run start

And here are the steps needed to start a session "telnet" from a > Cisco IPv6 router:

1 Router> enable
2 Router # telnet host [port] [keyword]

First Steps Explained
 
Step # 1
 
1 Router> enable

Puts the router in privileged EXEC mode.

Step # 2

2 Router # configure terminal

Puts the router in global configuration mode.

Step # 3

3 Router (config) # IPv6-Host> Cisco Test 2001:0 DB8: 20:01:: 12

Defines a static hostname to IP address mapping in the cache host name.

Step # 4
 
4 Router (config) # line vty 0 4

Create an interface and router vty line configuration mode.

Step # 5
 
5 Router (config-line) # password ittechtips

Create one (ittechtips) forgets that allows Telnet.

Step# 6

6 Router (config-line) # login TACACS

Tell the router to the server TACACS password checking at login use.

Step # 7
 
7 Router (config-line) # access-class vty in ipv6-acl

Adds an IPv6 access list named acl-vty interface, remote access to Telnet sessions that limits the access list match.

Step # 8
 
8Router (config-line) # end

The causes of the router configuration mode and get back in line to exit privileged EXEC mode.

Step # 9
 
9 Router # copy run start

Save the running-config to local Non-volatile random access memory (NVRAM).

Steps second Explained

Step # 1
 
1 Router> enable

Puts router Privileged EXECMode.

Step # 2
 
2 # telnet cisco-router tests

The command "telnet" to a Telnet session from the router to a remote host, build, or through the host name or IPv6 host address. A Telnet session can be set to the name of a router or an IPv6 address.

I invite you to visit my website, where you will find the latest information regarding Cisco IPv6 Design and ImplementationTechniques.

To your success,

free design software

Continuar leyendo

Ocultar articulo

Configuration backup ISP Redundancy on the Cisco ASA 5505 Firewall

In this article I will explain how to configure a Cisco ASA 5505 firewall to connect two ISPs for redundancy. Suppose we have a leading high-speed ISP and DSL line is connected to a cheaper secondary ISP. Normally all our traffic should flow through the primary ISP. If the primary link fails, the secondary connection for the DSL Internet access is available. Please note that the above scenario is valid only for outgoing traffic (that is, from ourInternal network to the Internet.) The feature that I've worked for ASA 5505 Version 7.2 (1) and above.

Suppose you have a static public IP address assigned by your primary 100.100.100.1 and other static public IP address 200.200.200.1 backup of our ISP. We use Ethernet 0 / 0 to connect to the primary ISP, Ethernet 0 / 1 for the connection to our internal LAN and Ethernet 0 / 2 for connecting up our ISP. We are three VLANs to support ourConfiguration. It is VLAN 1 (the default VLAN) Ethernet 0 / 1 (internal) 2 will be assigned to the VLAN assigned to Ethernet 0 / 0 (first ISP) and VLAN3 is Ethernet 0 / 2 (Backup ISP) to be assigned. We also need to configure two static routes for the default reference address of the ISP gateway. The primary default route has a metric of 1 ISP and the ISP will have a backup default route metric is greater than 1 (say 2). Let's review the following configuration:

ASA5505 (config) # interface ethernet0 / 0
ASA5505 (config-if) # switchport access VLAN 2
ASA5505 (config-if) # no shutdown

ASA5505 (config) # interface ethernet 0 / 1
ASA5505 (config-if) # switchport access vlan 1
ASA5505 (config-if) # no shutdown

ASA5505 (config) # interface Ethernet 0 / 2
ASA5505 (config-if) # switchport access VLAN 3
ASA5505 (config-if) # no shutdown

ASA5505 (config) # interface vlan 1
ASA5505 (config-if) # nameif inside
ASA5505 (config-if) # security-level 100
ASA5505 (config-if) # ip address 192.168.1.1 255.255.255.0
ASA5505 (config-if) # no shutdown

ASA5505 (config) # interface vlan 2
ASA5505 (config-if) # nameif-primary isp
ASA5505 (config-if) # security-level 0
ASA5505 (config-if) # ip address 100.100.100.1 255.255.255.0
ASA5505 (config-if) # interface VLAN 3 up
ASA5505 (config-if) # no shutdown

ASA5505 (config) # interface VLAN 3
ASA5505 (config-if) # nameif backup-isp
ASA5505 (config-if) # security level1
ASA5505 (config-if) # ip address 200.200.200.1 255.255.255.0
ASA5505 (config-if) # no shutdown

ASA5505 (config) # route 0.0.0.0 0.0.0.0 100.100.100.2 Primary isp a
ASA5505 (config) # route 0.0.0.0 0.0.0.0 200.200.200.2 backup-isp 2

You can get a complete step-by-step tutorial for configuring firewall Cisco ASA 5500 DOWNLOAD HERE.

android market

Continuar leyendo

Ocultar articulo

Cisco ASA 5500 firewall configuration - User interface and access arrangements

This article describes the user interface and types of access devices and commands associated with the operation of the Cisco ASA 5500 firewall. We expect that you, as you know, connect the device with a console cable (the blue ribbon cable with RJ-45 connector on one side, and serial DB-9 on the opposite side) and a terminal emulation software (eg HyperTerminal) use , and as a base interface of the command line.

A Cisco ASA security appliance has four main administrative accessMode:

Monitor Mode: Displays the Monitor> prompt. A special mode that allows you to update the image over the network or through the password recovery. While in monitor mode, you can type commands to the location of a TFTP server and the location of the software or the password recovery specified binary file to download. Access to this mode by pressing the "Pause" or "ESC" key immediately after turning on the device.

Non-privileged mode: displays the> prompt.Available from the first access to the device. If the device is a Cisco PIX series, the prompt mode for disadvantaged pixfirewall> 500 and the device of the new Cisco ASA 5500, is ready ciscoasa>
This method provides a limited view of the safety device. You can not configure anything from this mode. To start with the setup, you need to know the first command, the enable command. Enter enable and press Enter. The default password isempty, press the ENTER button to switch to the next access (privileged mode).

> Ciscoasa allow

privileged mode: displays the # prompt. Allows you to change your current settings. Each command also works in privileged mode. From this mode you can see the current configuration using the show running-config. However, you can not configure anything yet until you go into configuration mode. You reach the configuration mode with the "configure terminal" command from the privilegedFashion.

Configuration Mode: This mode displays the (config) # ENTER. You can modify any system configuration. Take the exit from each mode to the previous mode.

> Ciscoasa allow

The (config) # so it is sometimes called the global configuration. Some configuration commands in this mode, a specific command line mode and the prompt changes accordingly. For example, the interface command shows the interface configuration mode, as shownbelow:

ciscoasa (config) # interface GigabitEthernet0 / 1
ciscoasa (config-if) #

HP Printer C4680

Continuar leyendo

Ocultar articulo

Linksys router configuration and troubleshooting E1000

All Linksys routers, the work E-series technology on N. You can achieve wireless speeds up to 300 Mbps you can connect wireless computers, printers and other wireless Wi-Fi up to 300 Mbps Linksys E1000 is just a Linksys WRT160N router with a new Cisco Connect.

All E-series routers are gigabit Ethernet ports, you can speed up to 1000 Mb / s speed cable connection. E1000-Router operates on a 2.4 GHz wireless signal. E2100L router also works at 2.4 GHzWireless signal. This router has a USB port on it. You can use the USB hard drive to your router, set the hard drive with all the networked computers to connect. router E2000 and E3000 are operating at 2.4 GHz and 5 GHz wireless signal. You can make your gaming devices, blue ray player, the DVR system with this router a streaming video and fast way to connect.

E1000 Linksys router configuration:

All E-series Cisco routers are connected with the greatSoftware for easy installation. Before installing the router, make sure your Internet connection is working properly by the modem. Connect your computer directly to the modem and try to go online. If you can access the Internet from the modem and then connect to the Internet properly. Now put the CD into your computer. Do not run the CD on another computer. Use the same computer that connects to the modem. Follow the procedure from the CD. You can not produce it requires a connectionthe computer to the router. But you should set your computer to connect to the router for initial configuration of the router. You need to connect your computer to an Ethernet port on the router and the modem to the router's Internet port. That is, it will be 2 connected to the router. Now the next step on the device CD to go. It takes up to 5 minutes to configure the router.

Surely you can set the router without a CD also. You just need tothe router's configuration page, open and edit the settings manually.

Cisco software is related to hook into a very elegant tool. It will check the settings for connecting to the Internet and will automatically set the router for these settings. It 'also wireless network automatically with the network and a unique password. The last step is to see that the router is configured successfully. This opens the window where you can check the settingsthe router. The result is an option on the computer the All Programs list. If you want to change your wireless network settings, you can connect the Cisco software and change settings.

Cisco software to connect only works on Windows XP with Service Pack 3, Windows Vista with Service Pack 1 or later, Windows 7, Mac OS X Tiger 10.4.9, Mac OS X Tiger 10.4.11, Mac OS X Leopard 10.5. 8, Mac OS X Snow Leopard 10.6.1.

This software is alsoParental control options, which can be the time to access the websites for this. This software is able to assess access to the network. You can set the number of host computers. The wireless network will be the guest for something completely different network. This network of evaluation work on different ranges of IP addresses, so that the host population does not share the main wireless network. The guest will not be possible for the router settings, or accessComputers on the main network. But can the customer's network when you run the Cisco software to connect.

Once the main computer and run through the router. You can create a small flash drive, a device key. On other computers wirelessly, connect the USB key and run the setup program. E 'to connect the computer to the wireless network automatically. Perform a search for the wireless network and connect to your link. There is no need to donothing. You can set the USB key only if the wireless connection is managed by the connection manager for Windows. When the settings of the router's wireless router to set the page, Cisco Connection no longer works.

If the software is not able to set the router to connect to Cisco, you can use the router manually. It will not be able to take advantage of USB connectivity software such as Cisco introduced key or guestNetwork can access. You can set the router page and change the settings for connecting to the Internet manually after the Internet service provider.

The hardware warranty for the Linksys router and the series is 1 year, but the free technical support is only for 90 days.

printingmachine HP Printer C4680

Continuar leyendo

Ocultar articulo

Cisco IPv6 Training - IPv6 Requesting Router (RR) Configuration

Now you the first thing that you need to remember, is that the Requesting Router or RR is in most cases located at the customer's location (premises); it's the router that the customer (Site) has either purchased or has been given to them by their ISP.

In real world situations, the RR has 2 main responsibilities; obtaining the Global IPv6 prefix information (configurable parameters) from the ISP's Delegating Router (DR); and then passing that Global IPv6 prefix information (configurable parameters) along through out the customer's location (Site) by using Router Advertisements (RA).

Now, in order for you to configure a Cisco router's upstream interface to act like a Requesting Router (DHCP client) you'll need to perform these 5 steps:

Router>enable
Router#configure terminal
Router(config)#interface type number

Router(config-if)#ipv6 address autoconfig [default]
Router(config-if)#ipv6 dhcp client pd prefix-name [rapid-commit]

Steps Explained:

Step #1: Router>enable

Puts the router into Privileged Exec mode

Step #2: Router#configure terminal

Puts the router into Global Configuration mode

Step #3: Router(config)#interface serial 0/0

Allows, the RR to enter interface configuration mode for the serial 0/0 interface.

Step #4: Router(config)#ipv6 address autoconfig default

Allows, the RR router's serial 0/0 interface to automatically configure its own IPv6 address(es) by using Stateless Autoconfiguration.The word "default" is used to tell the serial 0/0 interface to install a default route into the RR's routing table; the default route indicates the upstream interface (serial 0/0) and the ISP's Delegating Router's interface.

Step #5: Router(config-if)#ipv6 dhcp client pd comcast-dhcp-prefix rapid-commit

Enables, the RR router's serial 0/0 interface to begin acting as a DHCPv6 client; and also forces the interface to start requesting an IPv6 Prefix(es) from the ISP's Delegating Router. The word "rapid-commit" is telling the interface (serial 0/0) to use the DHCPv6 two-message exchange method to ask for the IPv6 Prefix(es).

Now, just in case if you were wondering, the words "comcast-dhcp-prefix" used in the command is the name of the prefix.

I invite you to visit my website were you'll find the latest information regarding Cisco IPv6 Design and Implementation Techniques.

To your success,

Thanks To : MP3 Player notebookwindows7 freedesignsoftware

Continuar leyendo

Ocultar articulo

Basic Configuration Tutorial For the Cisco ASA 5505 Firewall

The Cisco ASA 5505 firewall is the smallest model of the new Cisco 5500 series hardware appliances. Although this model is ideal for small businesses, branch offices or even home use are likely to be the firewall security features such as the largest models (5510, 5520, 5540, etc.). The Adaptive Technology of the ASA Firewall Security provides solid and reliable firewall security, advanced application security features, Denial of Service attack protection, and much more.In addition, the implementation of the ASA 5505 appliance supports 150Mbps firewall throughput, and 4000 firewall connections per second, which is more than enough for small networks is.

In this article I will explain the basic configuration steps are necessary to set up a Cisco ASA 5505 firewall to connect a small network to the Internet. We anticipate that our ISP has assigned us a static public IP address (for example) 200.200.200.1 as an example, and that our internal network 192.168.1.0/24 area. Weis Port Address Translation (PAT) to use to translate our internal IP addresses to the public outside of the interface. The difference between the 5505-model from the larger models, ASA is that there is an 8-port 10/100 switch, which acts as a Layer 2 only. This means you can not configure the physical port as a Layer 3 ports, but you have to create VLANs and assign the interface to layer 2 interfaces in each VLAN. By default, the interface Ethernet0 / 0 assigned to VLAN 2 and it is the external interface(the one that connects to the Internet), and assigned to the other 7-interfaces (Ethernet0 / 1 to 0 / 7) by default on VLAN 1 and are used for connecting to the internal network. Let's see, the basic configuration setup of the most important steps you need to configure.

Step 1: Configure the internal VLAN interface
-------------------------------------------------- ----
ASA5505 (config) # interface vlan 1
ASA5505 (config-if) # nameif inside
ASA5505 (config-if) # security-level100
ASA5505 (config-if) # ip address 192.168.1.1 255.255.255.0
ASA5505 (config-if) # closed

Step 2: Configure the external interface VLAN (Internet connected)
-------------------------------------------------- -----------------------------------
ASA5505 (config) # interface vlan 2
ASA5505 (config-if) # nameif outside
ASA5505 (config-if) # security-level 0
ASA5505 (config-if) # ip address 200.200.200.1 255.255.255.0
ASA5505 (config-if) # closed

Step 3: AssignEthernet 0 / 0 to VLAN 2
-------------------------------------------------
ASA5505 (config) # interface Ethernet0 / 0
ASA5505 (config-if) # switchport access vlan 2
ASA5505 (config-if) # closed

Step 4: Check the other interfaces with no closed
--------------------------------------------------
ASA5505 (config) # interface Ethernet0 / 1
ASA5505 (config-if) # closed

Do the same for Ethernet0 / 1 to 0 / 7.

Step 5: Configuring PAT on the outsideInterface
-------------------------------------------------- ---
ASA5505 (config) # global (outside) 1 interface
ASA5505 (config) # nat (inside) 1 0.0.0.0 0.0.0.0

Step 6: Configure the default route to the ISP (assume default gateway is 200.200.200.2
-------------------------------------------------- -------------------------------------------------- -----
ASA5505 (config) # route outside 0.0.0.0 0.0.0.0 200.200.200.2 1

The above steps are absolutely necessary stepsYou need to configure for the manufacture of the device in operation. Of course there are many more configuration details that you need to implement to ensure the safety and functionality of your device, such as Access Control Lists, Static NAT, DHCP, DMZ zones, improving authentication, etc.

Visit my website in my resource box below for more information about Cisco products and solutions. You can also configure all Cisco ASA 5500 firewall here.

Related : spyware removal remove spyware

Continuar leyendo

Ocultar articulo