cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
419
Views
0
Helpful
2
Replies

Cisco ASA guide

cisco8887
Level 2
Level 2

Hi All,

I am trying to configure my cisco asa firewall . we have both 5505 and 5515.

I know most of the commands but want to learn all funtionalities of the asa so have set the time aside to read through the document.

so i went to read the following

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/asa_84_cli_config.html

it is for asa 8.4 and 8.6 but mine is 8.2 so i ended up having a 100% percent differnet command.

for instance tha nat command on my asa is nat (inside ) 0 ....

where as on the document is mentions that you can use nat (inside,outside) dynamic ...

so what i am trying to say is , where should i look ? does the command totally change with every upgrade release

where can i find a document that is complete and good and not version specific

for instance this one does not mention anything about the version etc but just 8 and most commands do work on my asa

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/cfgnat.html

please advise on how you would approach this

2 Replies 2

mfurnival
Level 4
Level 4

This is the link for 8.2:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/config.html

The commands do not change drastically between releases but each new code release will have new commands added, legacy commands removed and possibly changes in syntax of how you express something.

So there is no guide that covers all releases - this would be hideous to navigate and maintain. Just follow the configuration guide for your release and you will be fine.

I would agree that most the the time a new release will have only some changes in command syntax and they are pretty much just incremental changes in terms of established functions. However for ASA between release 8.2 and 8.3 there are very major changes in the way that the ASA implements things like access lists and address translation. So I sympathesize with the original poster who was reading documentation for the new implementation and attempting to use it with the old implementation.

So the advice to look for versions of documentation that match the version of code that you are running is good advice.

HTH

Rick

HTH

Rick