Have a new ASA 5510 connected to the laptop via console. I need to load the IOS and the configure from another ASA. I have tftp client on the laptop. Do I just need to set the inside IP to the same subnet as my laptop? Will I need a crossover cable?
View 1 Repliesnow i have some problem on Cisco Switch 3750 and ASA 5510, i would like to do loandbalancing on Cisco Switch 3750 and Active/Standby on ASA 5510.
which topology that we can use on this diagram, i mean which protocol connect 3750(2unit) to ASA 5510(2unit) and ASA 5510 to 3750, which protocol 3750.
Currently, we are monitoring a Cisco ASA which is running Software version 8.4(4).1. It is showing high cpu load (reaching 90%) at some hours, and our client (who is the owner) has asked us to troubleshoot this issue, since this is not a normal operating condition for the ASA.
We have checked over many forums and documents about "high cpu related to Dispatch Unit process", but we still don't know where to begin, and what steps we could recommend to our client. I have uploaded an archive, where I have extracted these outputs:
-show processes cpu-usage sorted non-zero
-show memory
-show service-policy global
-show interface
-show run threat
I have configured a tplink dual wan router + cisco ASA5510.
NET 1---- TP LINK ---- ASA5510 ---- COMPUTERS
NET 2----
The message: this page can not be displayed this showing. Some web pages only load when I click F5.
We are now using a ASA 5510 firewall and we would like to configure a internet load balance traffic in our environment.For example, some IP addresses go through local gateway for internet routing but some address go through VPN tunnel gateway.
View 1 Replies View RelatedIs there a way to load a spare compact flash with a running-config, ASA IOS, & ASDM software via card reader? I need to load another flash card with all of the settings necessary for normal operation. This "spare" card will replace the flash that is currently in use. The reason for the replacement is capacity and because of changes made to the running-config. The "in-use" card is 256MB, the "spare" one is 512MB. Also, the new card will have a few changes made to the running-config, so it will, in essence, be a reload.
I have a card reader for the compact flash cards. If there is a way to load up this new card using the card reader, without monkeying with the firewall, I would prefer that. Like I said in the previous paragraph, this new flash card will replace the other one, once it's ready.
Hardware: ASA 5510
CF: 256MB (wanting to upgrade to the new 512MB card)
ASA IOS: 8.4
This is my first time to use the Cisco ASA 5500 family. I have a request from a user to create an access rule, to allow all LAN traffic to Destination IP address 165.241.29.17, 165.241.31.254 with Destination TCP port 5060,5061,5070 and UDP port 50000-52399.
View 9 Replies View RelatedI'm having a problem configuring an ASA 5510. A previous employee started the config and left abruptly. He established a VPN Tunnel between two of our sites and that's working without an issue. The problem is, the network behind the 5510 at the remote location cannot access the internet.
ASA Version 8.2(1)
!
hostname PH-Firewall
domain-name pleasehelpme.com
enable password HXrQty4kqW8s8yeE encrypted
passwd ucA.qrYJWD9UyIFz encrypted
names
[code]....
I am confiuging a DMZ on my ASA 5510 but I have run out of physical ports, since I have dual Wan ports configured. I plan to implement a DMZ using subinterfaces. I have 2 questions:
1) Do I need to configure a Vlan to complete this task?
2) Do I need to re-configure the other interfaces for subinterfaces and/or vlans as well?
I'm trying to configure an asa 5510 8.2(1)?I have a range of pub ips 3*.108.234.145-150
>>> E0/0 3*.108.234.146 outside public
>>> E0/1 192.168.1.1 inside
>>> E0/2 192.168.3.1 dmz
would like to map dmz host 192.168.3.107 to external 3*.108.234.147 on port 5000 and 50001 LOCAL LAN should also be able to get to dmz host ports.i've tried a few configs and also following this example:
[URL]
without any luck, here is my config, also posted the out put of show arp which is able to see and ping the host on dmz, also the output of show access-list which shows hits to it.
prophase-pix(config-if)# show running-config
: Saved
:
ASA Version 8.2(1)
!
hostname prophase-pix
enable password encrypted
[code]....
I am absolutely new in the enterprise firewall world but I would like to start learning how to configure ASA 5505 and 5510. I did some research myself and I found that the material or the topic itself is a huge adventure (lots to read and understand). My company uses IOS versions until 8.2 due to the differences in the NAT-ting rules with 8.3 and 8.4.
View 1 Replies View RelatedI need to allow connection from IPHONE (in Internet) to connect Exchange on private network, synchronising with activesync (https) We have a microsoft TMG on frontal (inside network)
What is the method to parameter CISCO ASA using clientless access: Port forwardind? smarttunnel, web proxy? Nat?
i want the activesync request to cross ASA to go directly on TMG without asking password and user
I recently bought an all brand new ASA 5510 and it is here by my side. I'm trying to configure it but when entering https://192.168.1.1/admin I get Page Not Found error on IE. I'm able to ping 192.168.1.1 and have success telnet 443 port.
View 13 Replies View RelatedI have an ASA 5510 and I can not configure fine.
My problem is that I have 10 public address connected to ASA and each public address is redirectioned to an internal IP address.
An of these public address is the ip address of mi ASA.
how to configure and access-list and an NAT, the others I will configure.
interface Ethernet0/0
description Interface_WAN_World-Ttrends
speed 100
duplex full
nameif outside(code)
I have 2 ASA5510-SSL50-K9, can I configure HA Failover ?
View 7 Replies View RelatedI have a few devices that the manufacturer told us we have to set with a public IP (No Natting) We have Internet ->ASA5510-> Switch 3550 with 3 vlans. Up to now we have always use Natting to configure internet access to specific devices. I heard setting up a witch with one VLAN connected to the internet and all other internals is a bad idea. that was the only Idea we had.
View 3 Replies View Relatedhow to configure ASA 5510 anti X edition ? Can I have a link explaining the configuration step by step ?
View 2 Replies View Relatedi have a cisco asa 5510 and would like to add a NAT rule for a range of ports like 50000-59999
View 15 Replies View RelatedI have to configure a default-factory firewall (ASA 5510) in a simple scenário like this image represents:At this moment i have configured the interfaces as represented above and at this moment what i want is grant access from a LAN computer (10.10.0.0/24) to the internet.
Should i configure some acl? I read that all traffic from an interface with a superior security level to other interface is allowed, so since my inside interface has a security level of 100 and the outside 0, it should be possible access to internet from an inside computer?!
From all configurations and examples i have seen around, they all contemplate a fixed IP address from the ISP, but in my scenário i have a dynamic one. This fact matter for the configuration i want to do?
My firewall is running the software version 8.2(5).
Cisco ASA 5510 and I want to configure it as an access gateway following this .[URL] the basic configuration steps on what to do on ASDM.
View 2 Replies View RelatedI have inherited an asa 5510 whit 4GE SSM module installed. The asa runs fine, but i can not use the 4GE SSM ports. Using ASDM or console i can get and configure the gigabitethernet1/x ports but i can not get traffic on it. The ping from the console to the ip address of the Gigabitethernet1/0 is successful. On switches or hubs connected to those ports i can not see the port's mac address. The two Internal-data0/0 and Internal-data1/0 are down and i can get they up. How to configure 4GE SSM or ASA internal-data ports.
View 8 Replies View RelatedIs it possible to import the config of a 5510 to a 5520. Trying to replace two 5510's with 5520's and wondering is there a way import the existing config files for the 5510's into the 5520's?
View 3 Replies View RelatedI have one Cisco ASA 5510 with 2611 router two 2960 switch how to configure.
View 1 Replies View RelatedI am wondering if this is possible. We have multiple internet connections with fixed IP's coming into the office. We'd like to use one for FTP backup and another to service our websites. From what i have read a 5510 doesn't do policy based routing, but we'd like to configure our ftp server to use one of the internet pipes and our webserver to use another internet pipe. Is that possible?
We'd have two outside fixed IP interfaces and two internal interfaces. I could then use one of the internal interfaces for the web server and the other for the FTP server. consequently if the internal web server and FTP server use the fixed IP"s corresponding DNS server wouldn't that effectively route all FTP traffic out one interface and all web traffic out the other?
Then the FTP traffic would be NAT'ed to an internal interface and the HTTP & HTTPS traffic would be NAT'ed to a separate internal interface.
Then if each of the internal servers used the corresponding internal NIC on the ASA as it's gateway and the fixed IP's that correspond to the external DNS server, then it would affectively only use that gatway out for traffic? Would that work? Does it should route traffic out those pipes correct? Will the asa support two different next hop routers for the two different interfaces?
We have configured ASA 5510. We have configure Ethernet 0/0 ( Outside ) connected with ADSL line and Ethernet 0/1 ( Inside ) Local LAN. we have configured NAT and all the traffic is passing through outside interface. Now we have connected ethernet 0/3 ( leasedline ) interface with static public IP. Now we want to allow SMTP traffic to pass through from this interface.
How to configure it if we want our local lan SMTP traffic sending through new leased line ( Static Public IP ).
Currently we have deployed site to site vpn between 2 asa 5510 model. one is corporate site and one is remote site. now we plan to use radware load balancer in which 2 isp will terminate. now if at a remote site wecreate only 1 ipsec tunnel and mention sigle isp peering. if one isp fails at corporate how remote site will be access by site to site vpn through 2 isp vpn. what thing we need to do over asa as well as load balancer at both end.
View 6 Replies View RelatedI have a 3602e access point which I need to configure. It has been loaded with an autonomous image (for survey work) and my only access currently is via a browser. Is it possible to http into this access point if its only been imaged and not configured.
View 5 Replies View RelatedWe have two 100 MBPS P2P link from two different ISP and we have terminated both the link on our 6509 switch. Now we want to configure the load balancing between these two disfferent ISP 100 MBPS P2P link.
So, how to go and what all options we can try ? We are thinking for Ether Channel configuration. Need your expert opinions on the same and if etherchannel configuration is the option then what would be the configuration for the same ?
I have been locked out of using my VPN over the past week because of the error "Failed to Load Preferences". Whenever I open the cisco anyconnect and select the current selection or enter in a new connection I get that error. I have tried reinstalling, deleting out the cisco folder from my user account, and running cisco through the web that gives me the error "Web-based installation was unsuccessful. If you wish to install the CIsco Anyconnect VPN Client, you may download an installer package."
View 5 Replies View RelatedCan you configure multiple next-hop entries and have it perform load balancing?
Example
route-map test
match ip address test
set ip next-hop 1.1.1.1
set ip next-hop 2.2.2.2
How to configure load balancing in MPLS between two different service provider.
View 4 Replies View RelatedI got an issue when configure my 12416 router.
I plan to configure Static route load-balancing, which just assign different administraive distance to static routes.The route with lower distance is preferred. For example, if ISP A is our primary Internet provider the default route may be configured with a distance of 1 (all static routes are assigned this administrative distance) and the default route through ISP B may be configured with a distance of 100. In that case the default route through ISP B will be used if only the route through ISP A becomes unavailable.
But when I trying to configureWith Enhanced Object Tracking to do the route failover (a generic track object can monitor presence of an ip route, state of an SLA), I found my IOS not support such Track command. [code]
I've purchased a Linksys RV042 hoping I could connect my two ISP.Both of them are 1/1 Mb, first is DSL second PPPoE connection.The problem is that on system summary page it doesn't show me that second WAN is connected. Even when I trying to manually connect to Internet it doesn't work.
When this connection is in Load balance Mode, internet is very slow, sometimes it's even disconnected.
My question is:How to configure Load Balance properly?I've tried this page:
[URL]...