Be A Cisco Expert Without Course or Certification

This config is for simple config ASA/PIX firewall with 2 network interface. One for outside (Internet) and other for inside (LAN). All traffic from internal to external is accepted. All traffic from external to internal is droped.

Requirement:
- Cisco ASA/PIX with 2 network interface
- IP Public/Outside IP Address (ie: 65.1.1.x)
- IP Private/Inside IP Address (ie: 192.168.1.x)
- Next hop/Gateway IP Address (ie: 65.1.1.1)
- PIX/ASA ver.7.x or above

Firewall> enable
Password:
Firewall#
Firewall# config terminal
Firewall(config)# interface Ethernet0
Firewall(config-if)# nameif outside
Firewall(config-if)# security-level 0
Firewall(config-if)# ip address 65.1.1.2 255.255.255.0
Firewall(config-if)# speed 100
Firewall(config-if)# duplex full
Firewall(config-if)# exit

Firewall(config)# interface Ethernet1
Firewall(config-if)# nameif inside
Firewall(config-if)# security-level 100
Firewall(config-if)# ip address 192.168.1.1 255.255.255.0
Firewall(config-if)# speed 100
Firewall(config-if)# duplex full

Firewall(config)# nat (inside) 1 0.0.0.0 0.0.0.0
Firewall(config)# global (outside) 1 65.1.1.3 netmask 255.255.255.224

Firewall(config)# route outside 0.0.0.0 0.0.0.0 65.1.1.1

Popularity: 96%