tipslkp.blogg.se

Access Control Lists (ACL)Ĭiscoasa(config)# access-list OUTSIDE_IN extended permit tcp any host 192.168.1.1 eq 80Ĭiscoasa(config)# access-group OUTSIDE_IN in interface outsideĬiscoasa(config)# access-list INSIDE_IN extended deny ip host 192.168.1.1 anyĬiscoasa(config)# access-list INSIDE_IN extended permit ip any anyĬiscoasa(config)# access-group INSIDE_IN in interface inside Network Address Translation (NAT)Ĭiscoasa(config)# object network internal_lanĬiscoasa(config-network-object)# subnet 192.168.1.0 255.255.255.0Ĭiscoasa(config-network-object)# nat (inside,outside) dynamic interfaceĬiscoasa(config-network-object)# subnet 0.0.0.0 0.0.0.0Ĭiscoasa(config-network-object)# nat (any,outside) dynamic interfaceĬiscoasa(config)# object network web_server_staticĬiscoasa(config-network-object)# host 192.168.1.1Ĭiscoasa(config-network-object)# nat (DMZ, outside) static 100.1.1.1Ĭiscoasa(config-network-object)# nat (DMZ, outside) static 100.1.1.1 service tcp 80 80 security-level “number 0 to 100” : Assigns a security level to the interface.ip address “ip_address” “subnet_mask” : Assigns an IP address to the interface.nameif “interface name”: Assigns a name to an interface.The absolutely necessary Interface Sub-commands that you need to configure in order for the interface to pass traffic are the following: Interface Configuration and Security LevelsĬiscoasa(config)# interface GigabitEthernet0/1Ĭiscoasa(config-if)# ip address 192.168.1.2 255.255.255.0 Change Device HostnameĬiscoasa(config)# hostname DATA-CENTER-FWĭATA-CENTER-FW(config)# Configure Secure Management Access to the FirewallĬiscoasa(config)# crypto key generate rsa modulus 2048Ĭiscoasa(config)#aaa authentication ssh console LOCALĬiscoasa(config)#username admin password adminpassword privilege 15Ĭiscoasa(config)#ssh 192.168.1.10 255.255.255.255 inside

Passwords and UsersĬiscoasa(config)# enable password Gh4w7$-s39fg#(!Ĭiscoasa(config)#username ciscoadmin password adminpassword privilege 15 Image Software ManagementĬiscoasa(config)# boot system flash:/asa911-k8.bin

Also, if you are interested for Cisco Routers and Switches Commands Cheat Sheet documents, have a look at the links below:Ĭisco Router Commands Cheat Sheet Most Important Cisco ASA Firewall Commands Start Configuring the firewall