The above steps are the absolutely necessary steps you need to configure for making the appliance operational. The PAT configuration below is for ASA 8.3 and later:
NAT (static and dynamic) and PAT are configured under network objects. The “global” command is no longer supported. This version introduced several important configuration changes, especially on the NAT/PAT mechanism. Step 5: Configure PAT on the outside interfaceĪSA5505(config)# global (outside) 1 interfaceĪSA5505(config)# nat (inside) 1 0.0.0.0 0.0.0.0įrom March 2010, Cisco announced the new Cisco ASA software version 8.3. Notice from the diagram that port Ethernet0/0 connects to the Internet and ports Ethernet0/1 to 7 connect to internal hosts (PC computers etc). The difference of the 5505 model from the bigger ASA models is that it has an 8-port 10/100 switch which acts as Layer 2 only.īy default, interface Ethernet0/0 is assigned to VLAN 2 and its outside interface (the one which connects to the Internet), and the other 7 interfaces (Ethernet0/1 to 0/7) are assigned by default to VLAN 1 and are used for connecting to the internal network. We will use Port Address Translation (PAT) to translate our internal IP addresses to the public address of the outside interface. We assume that our ISP has assigned us a static public IP address (e.g 200.200.200.1 as an example) and that our internal network range is 192.168.1.0/24. Although this model is suitable for small businesses, branch offices or even home use, its firewall security capabilities are the same as the biggest models (5510, 5520, 5540 etc). The Cisco ASA 5505 Firewall is the smallest model in the new 5500 Cisco series of hardware appliances.
0 kommentar(er)
