Need Help with ASA Firewall Config

[pinoybot]

Hello All,

I am pretty new in the networking industry, I need some help with the following commands.

I bought a used firewall to play with and found this configuration:

static (inside,outside) 10.17.1.5 10.17.1.5 netmask 255.255.255.255 <-- I thought this is wrong but can someone help explain this if it's correct?

access-list OUTSIDE extended permit ip host 10.99.1.8 host 10.17.1.31 <- This one confuses me big time, OUTSIDE but it seems both are inside local address?

access-list OUTSIDE extended permit tcp any host 10.17.1.1 eq telnet <- Does this simply means any outside host can communicate to 10.17. using telnet?

Please help and thank you in advance! Have a great day everyone!

[cofee]

static (inside,outside) 10.17.1.5 10.17.1.5 netmask 255.255.255.255 <-- I thought this is wrong but can someone help explain this if it's correct? - This NAT rule is valid. It's called Identity NAT. Real IP gets translated to the same address no translation takes place in this NAT rule.

access-list OUTSIDE extended permit ip host 10.99.1.8 host 10.17.1.31 <- This one confuses me big time, OUTSIDE but it seems both are inside local address? -  Don't be confused with the word Outside, it doesn't always mean internet. For example you have this firewall and you can name its interfaces whatever you like. These are just two separate networks connected to this firewall.

access-list OUTSIDE extended permit tcp any host 10.17.1.1 eq telnet <- Does this simply means any outside host can communicate to 10.17. using telnet? That's correct

Please let me know if this answers your question.

[pinoybot]

Cofee I really appreciate your input! Thanks a lot!

[pinoybot]

access-list OUTSIDE extended permit ip host 10.99.1.8 host 10.17.1.31 <- This one confuses me big time, OUTSIDE but it seems both are inside local address? -  Don't be confused with the word Outside, it doesn't always mean internet. For example you have this firewall and you can name its interfaces whatever you like. These are just two separate networks connected to this firewall.

The above statement is just allowing 10.99.1.8 to reach10.17.1.31? Is that correct?

[cofee]

That's correct.