Firewall help

[b2kzone-beniamin]

Hello,

can someone help with a setup with a firewall asa 5505 soft version 8.4.5 I want to secure my private lan

modem(isp) --> firewall connection need to be on PPPoE --> router --> sw --> host

I need tips and trick I'm new with this

[balaji.bandi]

why do you need a router between FW and Switch ?  - any reason ?

[b2kzone-beniamin]

for vlan-routing I have few subnets

[balaji.bandi]

VLAN Routing can be done on Switch right if the switch has capable - why I am more keener was too many devices in the path make it complicated.

Can you list each device model and Code running and give more information to suggest better.

what VLAN, what IP address ? how is the exiting arrangement?

[b2kzone-beniamin]

ok, so

1. ASA 5505 software version 8.4.5 I want to be set as a protection the first layer of security the gateway, the dark angel that protect me :)))) , etc you got the analogy  :)))

2. cisco 2611XM with os flash:c2600-advsecurityk9-mz.124-15.t14.bin, C2600-ADVSECURITYK9-M, 12.4(15)T14 

-> I'm using for: dhcp server, inter-vlan routing, was a semi-firewall, was a pppoe interface, use for QoS and routing, those are the things for what is usesd

3. cisco 2950T with os flash:/c2950-i6k2l2q4-mz.121-22.EA14.bin, C2950-I6K2L2Q4-M, 12.1(22)EA14 

-> use for rest, printers, servers, pc, laptops, APs, etc

4. And here is Me the stupide and new guy that want to learn and prepare for CCNA exam

[Sheraz.Salim]

not call your self stupid it good to learn and master the technology. everyone start from streach. I am proud you started from somewhere.

cisco 5505 firewall does all the switch function like vlan. so why dont you use 5505 it has a build in switch ability.

[b2kzone-beniamin]

nice, I didn't know it, I will try, but first I want to play with all devices to can improve my skills by practice, this is the one and olny reason for having this chan of devices

[Sheraz.Salim]

youtube https://www.youtube.com/watch?v=vFnXd3ttRk8 here video how to setup ASA5505

[b2kzone-beniamin]

goodes thx

[balaji.bandi]

Since you mentioned Learning CCNA let me suggest good blog for CCNA to start :

https://www.youtube.com/watch?v=h9lcbOg69PU

https://www.youtube.com/watch?v=F6qvKRFn-xc

https://sh3llc0d3r.com/cisco/ccna-security-asa-5505/

[b2kzone-beniamin]

more goodes thank you and thank you, for me ever info, tips, trick I will storage and will be "my precioussss" :))))

[Sheraz.Salim]

All the best and enjoy happy learning 

[balaji.bandi]

20+TB collected - and learning never ends....passion of technology ....go on.

[b2kzone-beniamin]

sorry if the question is off the topic but for my private net where is best to apply the QoS one is on the outpu dailer for WAN , and next qos  for private net on the SW input or output, on the Router input or output ?

[Sheraz.Salim]

Like ACLs, you must apply the policy-map (QoS) to the specific interface you want it to affect.