Use Figure A as a reference for the kind of configuration you may need.Ĭlick the image to enlarge. Make sure you add rules for the inside and the outside to permit these, along with any other protocols that might be necessary such as FTP, ICMP, etc. You'll most likely want to allow HTTP/HTTPS traffic on your ASA.
For the translated interface put the outside interface. For the original source you can just leave it set at Any (or you can specify the inside network). Click Firewall while still under the Configuration tab. Now to configure PAT and the access rules. Those 18 steps take care of the first two basic things I spoke about before: configuring your interfaces and setting up a default route. Put a check next to Enable Traffic Between Two Or More Interfaces Which Are Configured With The Same Security Levels and next to Enable Traffic Between Two Or More Hosts Connected To The Same Interface. This saves you the step of configuring a static route, and it saves you the hassle of having to change the static route every time your IP changes. Put a check mark next to the option Obtain Default Route Using DHCP. Many ISPs require you to have a business account to get a static IP, though. If you happen to have a fixed IP at home, please use that. This will indicate that you are using the 192.168.1.0/24 network as your inside network. By default this is 192.168.1.1, which you can leave it at. Specify the internal address you want to use. There are no passwords configured yet, so just leave that blank. (Another option is to click Run Startup Wizard and do this entire configuration in the wizard.) Open a browser on your computer and go to 192.168.1.1, which is the default address for connecting to the ASA. Ports 6 and 7 are Power over Ethernet (PoE) ports I recommend reserving those ports for any devices that can use PoE. Connect your computer to one of the other ports on the ASA, which should be on the inside network by default. Connect the network cable from the modem to port 0 (default outside port) on the ASA. Initial setup and configuration of interfaces 
You need access rules that open ports so your devices can browse web pages, download from FTP sites, etc.This is what allows you to only have one IP address from your ISP, but you can have several devices connected on your internal network in a many-to-one configuration. You need to configure Port Address Translation (PAT).You need a default route that tells your devices where to go.You should configure the inside and outside interfaces.Remember there are only four basic things you need to configure to get Internet access. The firewall setup can seem a little daunting, especially because you will most likely lose your Internet access while you're doing it. In my case I'm using a NetGear WNDR3700, but I'll go over what you need to do at a high level, which should work with any wireless router. I've written several posts about setting up Cisco 5510s, but this piece focuses on common things you might encounter at home like not having a static IP from your ISP or utilizing your current wireless router. I've been working on getting a Cisco ASA 5505 firewall set up at home so that eventually I can create a site-to-site VPN between my house and my office.
0 kommentar(er)
