cisco asa

[blue4ciscome]

I planning to integrate cisco asa5505 device in runing enviornment for filter ip traffic.

Internet ----router----ciscoasa----lan

Ip series is public(25.263.25.0/24) througout of network (no privateIP)

now how do I set asa in such case and filter traffic from comming into lan and going out to internet.

pls input on case wise only .

[Jennifer Halim]

What sort of traffic would you like to allow outbound to the Internet from your LAN?

Here is an example:

Allowing HTTP and HTTPS outbound:

access-list inside-acl permit tcp 255.255.255.0 any eq 80

access-list inside-acl permit tcp 255.255.255.0 any eq 443

access-group inside-acl in interface inside

You can just add on to the above access-list for other traffic that you would like to allow going outbound from your public LAN subnet.

Hope this helps.

[blue4ciscome]

jen,

I didn;t configure firewall yet and no idea how do I configure it either in transparent mode or routed mode?

I need some input on firewall config in such condition where all ips are same subnet.

[andamani]

Hi,

In case you want to use the ASA as a L2 device then configure it as transparent mode. If you want to use it as a L3 device, configure it in the routed mode.

The following thread explains the difference between them.

https://supportforums.cisco.com/message/3057421

Hope this helps.

Regards,

Anisha

- Do rate helpful posts.

[blue4ciscome]

Hi anisha,

Do transparent mode will filter L3 Traffic(ACL),

I mean how do I configure asa in my case ?

[andamani · Accepted solution]

Hi,

The firewall in transparent mode will not filter L3 traffic, as it behaves like a bridge. It does not understand the Ip address in transparent mode.

You can create MAC Based ACL. the link for the same is below:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008089f467.shtml

If you want to filter L3 traffic, then configure the ASA in routed mode.

Hope this helps.

Regards,

Anisha

P.S.: please mark this post as answered if you feel your query is answered. Do rate helpful posts.