topic Re: Firewall help in Network Security

Firewall help

b2kzone-beniamin — Tue, 09 Mar 2021 17:47:30 GMT

Hello,

can someone help with a setup with a firewall asa 5505 soft version 8.4.5 I want to secure my private lan

modem(isp) --> firewall connection need to be on PPPoE --> router --> sw --> host

I need tips and trick I'm new with this

Re: Firewall help

balaji.bandi — Tue, 09 Mar 2021 18:56:53 GMT

why do you need a router between FW and Switch ? - any reason ?

Re: Firewall help

b2kzone-beniamin — Tue, 09 Mar 2021 19:00:32 GMT

for vlan-routing I have few subnets

Re: Firewall help

balaji.bandi — Tue, 09 Mar 2021 19:12:49 GMT

VLAN Routing can be done on Switch right if the switch has capable - why I am more keener was too many devices in the path make it complicated.

Can you list each device model and Code running and give more information to suggest better.

what VLAN, what IP address ? how is the exiting arrangement?

Re: Firewall help

b2kzone-beniamin — Tue, 09 Mar 2021 19:26:17 GMT

ok, so

1. ASA 5505 software version 8.4.5 I want to be set as a protection the first layer of security the gateway, the dark angel that protect me :)))) , etc you got the analogy :)))

2. cisco 2611XM with os flash:c2600-advsecurityk9-mz.124-15.t14.bin, C2600-ADVSECURITYK9-M, 12.4(15)T14

-> I'm using for: dhcp server, inter-vlan routing, was a semi-firewall, was a pppoe interface, use for QoS and routing, those are the things for what is usesd

3. cisco 2950T with os flash:/c2950-i6k2l2q4-mz.121-22.EA14.bin, C2950-I6K2L2Q4-M, 12.1(22)EA14

-> use for rest, printers, servers, pc, laptops, APs, etc

4. And here is Me the stupide and new guy that want to learn and prepare for CCNA exam

Re: Firewall help

Sheraz.Salim — Tue, 09 Mar 2021 19:49:29 GMT

not call your self stupid it good to learn and master the technology. everyone start from streach. I am proud you started from somewhere.

cisco 5505 firewall does all the switch function like vlan. so why dont you use 5505 it has a build in switch ability.

Re: Firewall help

b2kzone-beniamin — Tue, 09 Mar 2021 19:53:56 GMT

nice, I didn't know it, I will try, but first I want to play with all devices to can improve my skills by practice, this is the one and olny reason for having this chan of devices

Re: Firewall help

Sheraz.Salim — Tue, 09 Mar 2021 19:58:06 GMT

youtube https://www.youtube.com/watch?v=vFnXd3ttRk8 here video how to setup ASA5505

Re: Firewall help

balaji.bandi — Tue, 09 Mar 2021 20:00:43 GMT

Since you mentioned Learning CCNA let me suggest good blog for CCNA to start :

https://www.youtube.com/watch?v=h9lcbOg69PU

https://www.youtube.com/watch?v=F6qvKRFn-xc

https://sh3llc0d3r.com/cisco/ccna-security-asa-5505/

Re: Firewall help

b2kzone-beniamin — Tue, 09 Mar 2021 20:03:24 GMT

goodes thx

Re: Firewall help

b2kzone-beniamin — Tue, 09 Mar 2021 20:05:42 GMT

more goodes thank you and thank you, for me ever info, tips, trick I will storage and will be "my precioussss" :))))

Re: Firewall help

Sheraz.Salim — Tue, 09 Mar 2021 20:26:09 GMT

All the best and enjoy happy learning

Re: Firewall help

b2kzone-beniamin — Tue, 09 Mar 2021 20:38:49 GMT

sorry if the question is off the topic but for my private net where is best to apply the QoS one is on the outpu dailer for WAN , and next qos for private net on the SW input or output, on the Router input or output ?

Re: Firewall help

Sheraz.Salim — Tue, 09 Mar 2021 20:46:12 GMT

Like ACLs, you must apply the policy-map (QoS) to the specific interface you want it to affect.

Re: Firewall help

b2kzone-beniamin — Tue, 09 Mar 2021 20:52:35 GMT

ok, but

i have 5-6 classes management, web, server, transfer, default, mail

few of them are for wan like mail, web but rest are for private (management, server, transfer)

the problem for me is where to apply the policy map on the input interface that is connect o private network, or to the out put of a private network

also i need to mark the trafic from the sw or from the router

Re: Firewall help

Sheraz.Salim — Tue, 09 Mar 2021 21:15:52 GMT

apply it on the interface where the priviate network resides.

Re: Firewall help

b2kzone-beniamin — Tue, 09 Mar 2021 21:24:59 GMT

thx

Re: Firewall help

balaji.bandi — Tue, 09 Mar 2021 23:52:11 GMT

20+TB collected - and learning never ends....passion of technology ....go on.

Re: Firewall help

b2kzone-beniamin — Wed, 10 Mar 2021 08:27:36 GMT

also I have other quesion of the topic about Quality of Service on switchs and routers

I have a AP that is set with a vlan 55(this is the vlan that is allow to access the WAN) and is connected on port f0/2 from the switch.

The switch have port f0/1 as a trunk port to the router with all vlan that I have set on port.

Router have the port f0/1 with 3 subinterfaces f0/1.55, f0/1.100, f0/1.22 and port f0/0 is connected to ISP through a virtual interface (Dailer)

the BIG Questions is:

1. when I apply the quality of service for the my network is a best practice to mark as soon as i can right ?

2. I mark and classify the traffic from mai private network on the inbound (input) of the interface f0/2 where I'm connected with my AP, right ?

3. after i set the mark and class on the inbount (input) on the f0/2 port where to set the outbund (output) on the f0/2 or f0/1 ?

4. If on the f0/1 wil be on the input or output ? and I need to remark again or is remaining withe the first mark ?

5. when the traffic go to router also there I need to remark and and set where on input / output ?