topic help in configration in Network Security

help in configration

CSCO11825412 — Tue, 12 Mar 2019 01:27:15 GMT

hi there

i have network 10.7.10.0/22 conected by mpls router and conected by cisco router adsl for internet

ip for mpls router 10.7.10.1/22

ip for adsl 10.7.10.2/22

i want to install and configure cisco asa 5510 new

i cannot access to thes routers so i cannot change ip inteface and my network subnet

when i try to configure e0/0 outside network with ip 10.7.10.3

and e0/1 inside 10.7.10.4 with same subnet refuse by cisco asa

so in this sierno how i can configure it

and i want two route one for mpls

one for internet

i want full configure to make it and make good secuirty for my network

king regards

help in configration

CSCO11825412 — Fri, 12 Apr 2013 15:20:16 GMT

???

help in configration

Julio Carvajal — Fri, 12 Apr 2013 17:37:41 GMT

Hello Mohammed,

by default the asa firewall is on routed mode, this will lead to use different Ip address ( on different broadcast domains) on each of it's interfaces.

What you are looking for is to have the ASA in transparent mode,

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008089f467.shtml

http://blog.ine.com/2008/09/29/transparent-mode-firewall-guidelines/

remember to rate all of the helpful posts

Hope this helps

Julio

help in configration

CSCO11825412 — Fri, 12 Apr 2013 18:05:47 GMT

THANKS JUILO

but transpert mode will be good in secure my network and i can puplish web server and exchange server and protect my network and access to two network as i sent in my qustion

i mean user if i put gw ip for asa

can access to inernet by defult route

and access to server in other network conected by mpls router

help in configration

Julio Carvajal — Fri, 12 Apr 2013 18:09:04 GMT

Hello Mohamed,

Well it's going to be a bump in the wire.. so It will still protect your network but your DG shoul be pointing to the outside router,

the asa will be in between the mpls router and outside cisco router, all traffic will traverse the ASA and will be restricted as configured

remember to rate all of the helpful posts

regards,

Julio

help in configration

CSCO11825412 — Fri, 12 Apr 2013 19:08:31 GMT

thanks again

can u please configure as i want

and DG in my case u mean put it adsl router ip =10.7.8.9

help in configration

Julio Carvajal — Fri, 12 Apr 2013 19:22:20 GMT

What ado you mean configure it?

Regards,

help in configration

CSCO11825412 — Fri, 12 Apr 2013 19:44:36 GMT

yes

runing confige as same case

help in configration

Julio Carvajal — Fri, 12 Apr 2013 19:47:09 GMT

Hello Mohammed,

I have no access to a box right now,

Is there a way you could open a case with TAC so we can configure it for you from scratch?

Regards

help in configration

CSCO11825412 — Fri, 12 Apr 2013 19:51:38 GMT

no problem and thank u very much

i dont want to configure it by remotly i just mean runing configue like my sanerio only to understand the point

help in configration

Julio Carvajal — Fri, 12 Apr 2013 19:53:24 GMT

Hello Mohammed,

what version you have on your ASA?

help in configration

CSCO11825412 — Fri, 12 Apr 2013 19:54:31 GMT

5510 ver 8.0(2)

help in configration

Julio Carvajal — Fri, 12 Apr 2013 19:58:16 GMT

Hello Mohammed,

let's say you will connect the interface fas 0/0 to the cisco router ( outside) , then the fas 0/1 to the inside MPLS

conf te

ip address 10.7.10.4 255.255.252.0

int fast 0/0

nameif outside

no shut

interface fast 0/1

nameif inside

no shut

route outside 0.0.0.0 0.0.0.0 10.7.10.2 ( This is for traffic to the asa or from the asa itself)

In your scenario the inside users will use the MPLS router as their default gateway but if they want to go to the internet they must go to the outside cisco router and for that they must go through the asa

got it?

Regards

help in configration

CSCO11825412 — Fri, 12 Apr 2013 20:04:04 GMT

nameif inside

where is ip interface her in inside>> .............. and this will be contected to switch

help in configration

CSCO11825412 — Fri, 12 Apr 2013 20:05:02 GMT

and mpls router will be in same switch coneted by lan network

help in configration

Julio Carvajal — Fri, 12 Apr 2013 20:05:44 GMT

Hello,

there is none, that is the purpose of this configuration,

the same ip will be used on both inside and outside,

read the documents I provide you for further explanation

regards

help in configration

Julio Carvajal — Fri, 12 Apr 2013 20:07:14 GMT

MPLS router------ASA------Cisco Router

All of this is on the same broadcast domain

help in configration

CSCO11825412 — Fri, 12 Apr 2013 20:21:50 GMT

to many thnaks sir

if i want puplish sharpoint i put nat on adsl router to lan host example

10.7.10.50

this for exchange server

how i can puplish it on asa in transparnt mode

help in configration

Julio Carvajal — Fri, 12 Apr 2013 20:27:17 GMT

Hello,

You can do it on the ASA ( NAT on transparent mode is supported as long as you do not use the managment ip address , in this case is 10.7.10.4..

Example of nat

static ( inside,outside) 10.7.10.50 x.x.x.x ( here it goes the real ip address )

regards

help in configration

CSCO11825412 — Sat, 13 Apr 2013 04:01:39 GMT

thanks sir for all answer

if nated was on ciso router adsl static nat 10.7.10.50 x.x.x.x real ip for exchange and conected on asa

i make double nat on asa

static ( inside,outside) 10.7.10.50 x.x.x.x ( here it goes the real ip address )

right ???