Tag Archives: ASA

Cisco AnyConnect configuration

If you are accessing firewall via ASDM through outside interface then after configuring anyconect you will not be able to manage ASA via ASA on port 443 you need to change the management port: http server enable 8080 http 0.0.0.0 … Continue reading

Posted in ASA | Tagged , , , , , | Leave a comment

ASA HA configuration active-passive

Purpose of this post is to configure HA in ASA (Active-Passive). Firewall will in active-passive mode. We need to have two firewall with same hardware , same no. interfaces, same RAM size, same modules. In following example we have used … Continue reading

Posted in ASA | Tagged , , , | Leave a comment

CISCO ASA How to:

How to check ASA version: asa# show version | inc Version Cisco Adaptive Security Appliance Software Version 9.2(4)8 Device Manager Version 7.5(2)153 How to check ASA hardware: asa# show version | inc Hardware Hardware:   ASA5545, 12288 MB RAM, CPU Lynnfield … Continue reading

Posted in ASA | Tagged , , | Leave a comment

Take packet captures on ASA

If we need to take packet capture during some troubleshooting on ASA we can take captures on ASA as follows. We can take capture on interface where the traffic will hit and on interface where traffic will go i.e ingress … Continue reading

Posted in ASA | Tagged , , , , , , , | Leave a comment

Allow ping through ASA

R1 wants to ping to R3 but is not able to ping. By default CISCO ASA doesn’t inspect icmp it means that if you want to ping to some server from LAN ping reply will not come. To allow ping … Continue reading

Posted in ASA | Tagged , , , , , | Leave a comment

ASA 8.4 Example

Access webserver from outside: This can be done by two way : Twice NAT, Auto NAT Twice NAT object network real-host-obj  host 192.168.1.2 object network mapped-host-obj  host 1.1.1.1 nat (inside,outside) source static real-host-obj mapped-host-obj access-list allow-webserver-inside extended permit ip any … Continue reading

Posted in ASA | Tagged , , | Leave a comment

ASA 8.4 NAT

   Static NAT: A consistent mapping between source and destination will be there in xlate table. This NAT is bidirectional means any host can initiate traffic from either side. Dynamic NAT: In this NAT we map a pool of real … Continue reading

Posted in ASA | Tagged , , , | Leave a comment