topic Re: cisco asa in Network Security

cisco asa

blue4ciscome — Mon, 11 Mar 2019 20:10:29 GMT

I planning to integrate cisco asa5505 device in runing enviornment for filter ip traffic.

Internet ----router----ciscoasa----lan

Ip series is public(25.263.25.0/24) througout of network (no privateIP)

now how do I set asa in such case and filter traffic from comming into lan and going out to internet.

pls input on case wise only .

Re: cisco asa

Jennifer Halim — Tue, 22 Mar 2011 11:34:45 GMT

What sort of traffic would you like to allow outbound to the Internet from your LAN?

Here is an example:

Allowing HTTP and HTTPS outbound:

access-list inside-acl permit tcp 255.255.255.0 any eq 80

access-list inside-acl permit tcp 255.255.255.0 any eq 443

access-group inside-acl in interface inside

You can just add on to the above access-list for other traffic that you would like to allow going outbound from your public LAN subnet.

Hope this helps.

Re: cisco asa

blue4ciscome — Tue, 22 Mar 2011 13:08:47 GMT

jen,

I didn;t configure firewall yet and no idea how do I configure it either in transparent mode or routed mode?

I need some input on firewall config in such condition where all ips are same subnet.

Re: cisco asa

andamani — Tue, 22 Mar 2011 13:28:02 GMT

Hi,

In case you want to use the ASA as a L2 device then configure it as transparent mode. If you want to use it as a L3 device, configure it in the routed mode.

The following thread explains the difference between them.

https://supportforums.cisco.com/message/3057421

Hope this helps.

Regards,

Anisha

- Do rate helpful posts.

Re: cisco asa

blue4ciscome — Thu, 24 Mar 2011 07:50:14 GMT

Hi anisha,

Do transparent mode will filter L3 Traffic(ACL),

I mean how do I configure asa in my case ?

Re: cisco asa

andamani — Thu, 24 Mar 2011 12:48:15 GMT

Hi,

The firewall in transparent mode will not filter L3 traffic, as it behaves like a bridge. It does not understand the Ip address in transparent mode.

You can create MAC Based ACL. the link for the same is below:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008089f467.shtml

If you want to filter L3 traffic, then configure the ASA in routed mode.

Hope this helps.

Regards,

Anisha

P.S.: please mark this post as answered if you feel your query is answered. Do rate helpful posts.