Configuring ASA 5505

Janardhan Meesala · ‎05-12-2011

HI,

I have ASA 5505 with base licence. I configured NATing and VPN(site to site). All are working fine.

My ASA is base license so i created 2 VLANS, one is inside and outside.

Inside i am using 10.91.40.0/24 serie IP addresses.

Below are the new requirements that i need to configre:

1. First 30 IP addresses only needs internet directly.( Servers and Management)

2. If remaining IPs likes to use web then traffic needs to forward one proxy server( where he gives user authentiation)

So help me to configure this.

Regards,

Janardhan

manish arora · ‎05-12-2011

try this :-

Manish

Janardhan Meesala · ‎05-12-2011

HI,

Thanks for your prompt reply.

Below commands alone is enough to redirect traffic to squid server.

access-list 111 deny tcp any any neq www (create

access list for port 80 traffic)

access-list 111 deny tcp host 192.168.100.1 any (192.168.100.1

- squid proxy)

access-list 111 permit tcp any any

route-map proxy-redirect permit 100

match ip address 111

set ip next-hop 192.168.100.1 (forward all port 80 traffic

to squid- 192.168.100.1)

And in my ASA i dont have command "set ip next-hop " under route-map.

And one more is for my first 30 IP's i want internet access directly.

Regards,

Janardhan

--

Thanks,

Best Regards,

Janardhan M

Love Ur Life n Live Ur Life

+91-94919 68288