วีดีโอ

Port Forwarding in ASA

PAT is used to map a single unregistered address to registered address but with different ports. As per the architecture , connected inside and outside security zones of Cisco ASA to Switch 1 and Switch 2 respectively. Let's understand how PAT works

Dynamic NAT is used to map a single unregistered address to registered address from a pool of registered addresses. As per the architecture , connected inside and outside security zones of Cisco ASA to Switch 1 and Switch 2 respectively. Let's understand how Dynamic NAT translation works

Static NAT is used to map a single unregistered address to a registered address As per the architecture , connected inside and outside security zones of Cisco ASA to Switch 1 and Switch 2 respectively. Let's understand how one to one translation works

In this architecture , i have connected Cisco ASA Firewall Inside Interface to DHCP client and Cisco ASA Firewall Outside interface connected to DHCP Server (Cisco Switch) Let's understand how DHCP Relay works and how the client gets the ip address from the DHCP server via DHCP Relay

In this architecture , one ASA Firewall Configured as a Server and other ASA Firewall configured as a client and both are connected physically. Lets understand how ASA Firewall configured as a server lease ip address to another ASA Firewall configured as a client.

In this Architecture , ASA Firewall used as a DHCP Server and VPCS as a client. Let's understand how ASA Firewall lease ip addresses to the client from the DHCP pool assigned in ASA Firewall.

In this architecture connected ASA Firewall to Cisco manageable switch which in turn connected to PC1 which in Vlan10 and PC2 which is in Vlan20 Create Sub interfaces for Vlan 10 and Vlan 20 in Cisco ASA Firewall Create Vlan 10 and Vlan 20 in Cisco Switch Assign both the sub interfaces to Security Level 80 and Security Level 90 Then check the ping connectivity from PC1 to PC2 and from PC2 to PC1

In this architecture connected ASA Firewall to non manageable switch which in turn connected to PC1 which in Vlan10 and PC2 which is in Vlan20 Create Sub interfaces for Vlan 10 and Vlan 20 in Cisco ASA Firewall Assign both the sub interfaces to Security Level 80 and Security Level 90 Then check the ping connectivity from PC1 to PC2 and from PC2 to PC1

1.Inside assigned Security level-100 which is most trusted 2.Outside assigned Security level-0 which is least trusted 3.Enable SSH is Cisco ASA . 4.Create a access-list from outside to Cisco ASA 5.Apply using access-group statement

Telnet to ASA Firewall from Switch using below commands 1. Set Username and Password in Cisco ASA 2.Enable command aaa authentication telnet console LOCAL 3.telnet 192.168.1.2 255.255.255.0 inside

In this architecture , connected Cisco Switch 1 and Cisco switch2 to Cisco ASA Firewalll inside and outside security zone Inside is most trusted assigned security level 100 Outside is less trusted assigned security level 0 now let's understand how to initiate the telnet traffic from Cisco Switch1 to Cisco Switch 2 via Cisco ASA

Time Based Access List: If I want to allow telnet traffic from outside to DMZ during a specific time-period

Suppose you have two interfaces in the same security level 100, we can enable this communication using same-security-traffic command

How to remove access list in ASA Firewall

ASA Firewall_Object group service Access list

Cisco ASA_Traffic from DMZ to Inside using Object Group

Cisco ASA Firewall_Access List Configuration

Cisco ASA Security Levels

ASA Firewall_How To Set Clock

ASA Firewall_How to Enable Logging

Cisco ASA ASDM Set Up

Troubleshooting Weight

Troubleshooting ASPATH Prepend

Troubleshooting Local Preference

Troubleshooting MED

Troubleshooting Scenario1

Troubleshooting MPLS Part4

Troubleshooting MPLS Part 3