topic Re: Help installing a Cisco ASA 5505 in Network Security

Help installing a Cisco ASA 5505

carrgater — Mon, 11 Mar 2019 23:57:48 GMT

Hi,

I'd like some advice configuring a Cisco ASA 5505 firewall.

In the office there is 1 x SBS 2008 server and 5 x PCs, all sat behind a Netgear DGN1000 ADSL router.

We want to implement a ASA 5505 for added security.

We have been given the following public static IP address:

x.x.x.217 to x.x.x.221

Default gateway x.x.x.222

Subnet mask 255.255.255.248

I have configured the internal interface of the Cisco ASA 5505 to be 192.168.0.1 - this is connected to local switch. The client PCs use 192.168.0.1 as their default gateway.

I have configured the external ASA 5505 interface to be x.x.x.217

There is a static router on ASA 5505

Interface Outside

IP address 0.0.0.0

Mask 0.0.0.0

Gateway x.x.x.218

Change the current router status from Router/Firewall/Modem to Modem only (Bridge mode). The ASA 5505 has its outside interface connected into one of the LAN ports of the netgear. The lan port has an IP of 192.168.0.254

All this is summarised in the document attached.

None of the PCs/server have any connection to outside world

Can anyone help?

Re: Help installing a Cisco ASA 5505

rmanapat — Sat, 22 Sep 2012 14:59:20 GMT

It would be very helpful to troubleshoot your issue if you post your running config.

Thanks,

Russell

Re: Help installing a Cisco ASA 5505

nkarthikeyan — Sat, 22 Sep 2012 20:35:45 GMT

Hi Jonathan,

When you have route outisde any any is pointed to a public IP address x.x.x.218 and when you have the private zone IP which connects to the netgear box is configured on interface.... how it works....

ASA inside is 192.168.0.1 and that connects to a switch.. this is fine...

You should have public ip address x.x.x.217 on the outside interface and gateway as u said x.x.x.218. But you should have the NAT configured in place within the public IP address range provided by the ISP to make the internet work for you.

Please let me know if my understanding is wrong.

Please do rate if tge given information helps.

Karthik

Help installing a Cisco ASA 5505

Sean Porterfield — Mon, 24 Sep 2012 15:41:27 GMT

First you say your ISP told you to use

> Default gateway x.x.x.222

Then you say you configured the ASA with

> Gateway x.x.x.218

Set the ASA gateway to x.x.x.222 as instructed by your ISP.