By Harris Andrea

The Cisco ASA 5505 Firewall is the smallest model in the new 5500 Cisco series of hardware appliances. Although this model is suitable for small businesses, branch offices or even home use, its firewall security capabilities are the same as the biggest models (5510, 5520, 5540 etc). The Adaptive Security technology of the ASA firewalls offers solid and reliable firewall protection, advanced application aware security, denial of service attack protection and much more. Moreover, the performance of the ASA 5505 appliance supports 150Mbps firewall throughput and 4000 firewall connections per second, which is more than enough for small networks.

In this article I will explain the basic configuration steps needed to setup a Cisco 5505 ASA firewall for connecting a small network to the Internet. We assume that our ISP has assigned us a static public IP address (e.g 200.200.200.1 as an example) and that our internal network range is 192.168.1.0/24. We will use Port Address Translation (PAT) to translate our internal IP addresses to the public address of the outside interface. The difference of the 5505 model from the bigger ASA models is that it has an 8-port 10/100 switch which acts as Layer 2 only. That is, you can not configure the physical ports as Layer 3 ports, rather you have to create interface Vlans and assign the Layer 2 interfaces in each VLAN. By default, interface Ethernet0/0 is assigned to VLAN 2 and it's the outside interface (the one which connects to the Internet), and the other 7 interfaces (Ethernet0/1 to 0/7) are assigned by default to VLAN 1 and are used for connecting to the internal network. Let's see the basic configuration setup of the most important steps that you need to configure.

Step1: Configure the internal interface vlan

------------------------------------------------------

ASA5505(config)# interface Vlan 1

ASA5505(config-if)# nameif inside

ASA5505(config-if)# security-level 100

ASA5505(config-if)# ip address 192.168.1.1 255.255.255.0

ASA5505(config-if)# no shut

Step 2: Configure the external interface vlan (connected to Internet)

-------------------------------------------------------------------------------------

ASA5505(config)# interface Vlan 2

ASA5505(config-if)# nameif outside

ASA5505(config-if)# security-level 0

ASA5505(config-if)# ip address 200.200.200.1 255.255.255.0

ASA5505(config-if)# no shut

Step 3: Assign Ethernet 0/0 to Vlan 2

-------------------------------------------------

ASA5505(config)# interface Ethernet0/0

ASA5505(config-if)# switchport access vlan 2

ASA5505(config-if)# no shut

Step 4: Enable the rest interfaces with no shut

--------------------------------------------------

ASA5505(config)# interface Ethernet0/1

ASA5505(config-if)# no shut

Do the same for Ethernet0/1 to 0/7.

Step 5: Configure PAT on the outside interface

-----------------------------------------------------

ASA5505(config)# global (outside) 1 interface

ASA5505(config)# nat (inside) 1 0.0.0.0 0.0.0.0

Step 6: Configure default route towards the ISP (assume default gateway is 200.200.200.2

---------------------------------------------------------------------------------------------------------

ASA5505(config)# route outside 0.0.0.0 0.0.0.0 200.200.200.2 1

The above steps are the absolutely necessary steps you need to configure for making the appliance operational. Of course there are much more configuration details that you need to implement in order to enhance the security and functionality of your appliance, such as Access Control Lists, Static NAT, DHCP, DMZ zones, authentication etc.

Visit my website in my resource box below for more information about Cisco products and solutions. You can also learn how to configure any Cisco ASA 5500 Firewall Here.

You can check out my website for more Cisco configuration examples and other related details about designing and implementing Cisco solutions: Cisco Tips and Tutorials.

Article Source: http://EzineArticles.com/?expert=Harris_Andrea
http://EzineArticles.com/?Basic-Configuration-Tutorial-For-the-Cisco-ASA-5505-Firewall&id=1681858

Routers Articles

Win-Spy Monitoring Software Monitor Your Home PC Or Any PC Within Your Wireless Network. Monitor A Cheating Spouse. Records Any Password. Monitor Any Email. Monitor Via Webcam And Mic.  Continue Reading... Computer Repair Home Study Course Learn How to Repair Your Computer Today! - Save money on costly repairs and even start your own business. Join thousands of others who learned new skills, jump started their careers, made extra money, and started their biz with this Computer Repair Course!  Continue Reading... Overclocking Your Cpu to the Extreme Who Else Wants To Turn There PC Into A Extreme Gaming Rig Without Spending A Single Cent On Hardware? Discover how to unleash over 900% of CPU performance from your PC in a just a few easy steps, then watch in awe as your game's frame-rates double overnight!  Continue Reading... PC Secrets How to make your computer boot up in mere seconds. Exactly how you can Instantly end any threat of Spyware, Trojans and Viruses destroying your computer from the inside out – for good! Secret Insider settings that with just a few clicks will speed up your computer MULTIPLE TIMES. Instantly And Easily Optimize and Speed Up Slow, Crashing, Freezing Computers Even if You Completely Suck at Computers! Fix For All PC Issues.  Continue Reading...

A Quick Note From The Publisher... If you like the article above, you may be interested in the following article which is also related to Routers... Sharing an Internet Connection over a Wi-Fi Network Once you've got your wireless network set up, I've no doubt that one of the first things you'll want to do with it is share an Internet connection -- after all, that's why most home users put in a wireless network to begin with. Well, the good news is that Windows has Internet Connection Sharing built in. The bad news is that setting it up can sometimes be a little less than fun. The problem is that the Internet Connection Sharing Wizards that come with Windows 98 Second Edition and Windows Me don't work very well, and in some cases, can break your existing Internet Connection. The good news is that it's not that hard to set up, as long as you do it properly. How Internet Connection Sharing Works When you set up Internet Connection Sharing, you set up one of your computers as a 'gateway' to the Internet, and then use this gateway to access the Internet with your other computers. Essentially, requests for data from the Internet are being sent out through the...