Monday, May 21, 2012

ASA Basic Firewall Config

Step1
ASA(config)# enable password mysecretpassword

Step2
ASA(config)# username admin password Pa55w0rd
! use this LOCAL username to authenticate for SSH connections
ASA(config)#  aaa authentication ssh console LOCAL
ASA(config)# crypto key generate rsa modulus 1024

! Specify the hosts allowed to connect to the security appliance.
ASA(config)# ssh 10.1.1.1 255.255.255.255 inside
ASA(config)# ssh 200.200.200.1 255.255.255.255 outside

Step3
ASA(config)# int Gi0/1
ASA(config-if)# nameif inside
ASA(config-if)# ip add 10.0.0.1 255.255.255.0
ASA(config-if)# security-level 100
ASA(config-if)# no shut

ASA(config)# int Gi0/0
ASA(config-if)# nameif outside
ASA(config-if)# ip add 200.0.0.1 255.255.255.0
ASA(config-if)# security-level 0
ASA(config-if)# no shut

Step4
! default route to the internet
ASA(config)# route outside 0.0.0.0 0.0.0.0 100.1.1.1
! route to internal network
ASA(config)# route inside 192.168.1.0 255.255.255.0 192.168.1.1

No comments:

Post a Comment