Scribd
Upload
2 views8 pages

ASA Configuration

The document outlines the configuration steps for a Cisco ASA firewall, including setting security levels for different interfaces, creating VLANs, and configuring DHCP. It emphasizes avoiding VLAN 1 for security reasons and details the commands necessary to assign VLANs to physical interfaces and enable telnet. The final steps include verifying configurations and ensuring the DHCP server is functioning correctly.

Uploaded by

sana sana
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
2 views8 pages

ASA Configuration

The document outlines the configuration steps for a Cisco ASA firewall, including setting security levels for different interfaces, creating VLANs, and configuring DHCP. It emphasizes avoiding VLAN 1 for security reasons and details the commands necessary to assign VLANs to physical interfaces and enable telnet. The final steps include verifying configurations and ensuring the DHCP server is functioning correctly.

Uploaded by

sana sana
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd

ASA Configuration

Inside – 100 sec level


Outside – 0 sec level
DMZ – 1-99 Sec level
1. Do the initial Configuration.
2. Check the security configurations initial in the ASA firewall,
3. Change the ASA hostname for the ASA,

4. Create VLAN 2,
5. Need to add ISP s’ IP addresses(dhcp) is needed to be changed,

6. Check DHCP removed successfully, (show run)

7. Update VLAN 2 as below,

int vlan 2
Creates or enters VLAN 2 interface
Used to define a logical interface on the firewall.

nameif outside
Names the interface “outside”
This label is important because Cisco ASA uses it in rules (NAT, ACLs).
“outside” usually means the untrusted network (internet side).

ip add [Link] [Link]


Assigns an IP address and subnet mask
Required so the firewall can send/receive traffic on that network.

security-level 0
Sets the security level to lowest (0)
In ASA, levels range from 0 (least trusted) to 100 (most trusted).
“outside” is typically set to 0 because it represents the internet.
You can use VLAN 1, but it is generally not recommended when configuring a Cisco ASA
firewall.
VLAN 1 is the default VLAN and is commonly used by many network devices for control and
management traffic. Because of this, it is more predictable and can be a target for security
risks. It may also already be in use, which can lead to conflicts or confusion in your network
design.
Using VLAN 2 or any other VLAN above 1 gives you a cleaner and more controlled setup. It
helps separate your network properly, avoids default behavior issues, and follows common
industry best practices.
In simple terms, VLAN 1 is usually avoided to improve security and keep the network design
clear and organized.

8. Assign VLAN 2 to the ISP interface,

 int e0/2
This selects the physical interface Ethernet 0/2 on the firewall.
 switchport access vlan 2
This assigns that physical port to VLAN 2.
It means any traffic coming into this port will belong to VLAN 2.
 exit
This simply exits interface configuration mode.

VLAN 2 is the logical interface


Ethernet 0/2 is the physical port
This command links them together so communication can happen

9. Assign VLAN 1 to the switch VLAN,

10. Check and verify configurations,


11. Enable credentials,

12. Enable telnet,


13. Create dhcp pool,

14. DHCP DNS enabling,

15. Enable DHCP in the PC,

PC gets the IPS from ASA firewall and it acts as the DHCP server,

16. Save the commands,


17. Check the telnet connection is working,

You might also like