Configure Cisco ASA 5510 with firewall Rules and other security

[christiaanh2]

Hi everyone I have a Cisco ASA 5510 that I would like to have configured for network security in my house There is a cable coming directly from my isp to my network rack I would like to connect this cable directly to my ASA 5510 and from my ASA 5510 to my Cisco router 2921 but I have never configured an ASA I have found someone who can help with it but this person does not answer Is there someone who wants to configure the ASA 5510 for me via Teamviewer?

[Georg Pauwen]

Hello,

sorry for the late reply. If you have the Teamviewer ID and password, I'll have a look at the ASA. Make sure it is hooked up to the ISP modem/router.

[christiaanh2]

the cable is ready from my isp these are my Teamviewer login details 855 490 652 w9qgrj1u

[Georg Pauwen]

I have no connection...

[christiaanh2]

with what

[Georg Pauwen]

Hello,

I have come up with the configs below, try and enter these yourself. I am not sure if this is going to work, as now effectively you have three devices (the 2921, the ASA, and the ISP router) performing network address translation:

Cisco 2921

ip dhcp excluded-address 192.168.1.1
!
ip dhcp pool LAN
network 192.168.1.0 255.255.255.0
default-router 192.168.1.1
dns-server 8.8.8.8
!
interface GigabitEthernet0/0
description Uplink to ISP Router
ip address 192.168.2.2. 255.255.255.0
ip nat outside
!
interface GigabitEthernet0/2
description Downlink to HP ProCurve
ip address 192.168.1.1 255.255.255.0
ip nat inside
!
ip nat inside source list 1 interface GigabitEthernet0/0 overload
!
ip route 0.0.0.0 0.0.0.0 192.168.2.1
!
access-list 1 permit 192.168.1.0 0.0.0.255

ASA 5510

interface Ethernet0/0
description Downlink to 2921 Router
nameif inside
security-level 100
ip address 192.168.2.1 255.255.255.0
!
interface Ethernet0/1
description Uplink to ISP Modem
nameif outside
security-level 0
ip address dhcp setroute
!
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
!
route inside 192.168.1.0 255.255.255.0 192.168.2.2 <-- edit

[christiaanh2]

do I also have to adjust the settings in my router if that is the case I'd rather not do that

[Georg Pauwen]

Hello,

yes, on the 2921 you have to change the IP address of the interface that connects to the ASA.

Connecting the ASA only makes sense if you want to practice your skills, although the software running on it is so old that you are basically learning obsolete code. The device does not add anything to the functionality of your network, on the contrary, it slows everything down because it is yet another layer 3 device.

[christiaanh2]

Yesterday I was able to find the latest software for my ASA via Cisco but I don't know how to set it up I've read everywhere that you have to do that with tftp but I don't know how to set up the latest software

[Georg Pauwen]

Hello,

which version did you download ? Newer version usually require more memory. Check if you have enough memory to actually be able to install the new version.

[christiaanh2]

memory ram i have 1 GB

9.1.7 I downloaded this software from Cisco

[Georg Pauwen]

Hello,

1GB of RAM should in theory be enough (it is the minimum requirement). I would not delete the old 8.2 image in flash yet, just in case the newer 9.1 version does not work.

Have a look at the link below for instructions on how to upgrade (it mentions 8.3 but should work the same for 9.x):

https://community.cisco.com/t5/security-documents/asa-8-3-upgrade-what-you-need-to-know/ta-p/3127078

[christiaanh2]

I clicked on the link you gave me and there are indeed instructions on it but I think you must have already configured the ASA 5510 to install the software on it Is it possible that you can set up the software for me and the ASA configure for me

[Georg Pauwen]

Hello,

you need to copy the 9.1.7 file you have to disk0, and change the boot statement (there is currently a boot statement in your configuration that points to the current 8.2 image, change that to reflect the new image):

boot system disk0:/new_image_name

I cannot do that remotely.