Cisco Firewall :: Setting Up New ASA 5505 Into Existing Network?

Mar 21, 2013

I am having a problem trying to figure out how to add a new ASA 5505 to an existing network.  My current network is:Cable Modem  >  Linksys  >  48 port switch With multiple hosts residing on the 192.168.0.x network.Now i know that the ASA comes default with on the inside interface and i want to change that to  I have tried to do this thru ASDM using the wizard and manually.  Once i hit ok for it to write the config, it gives me an error that it didnt take.  I then lose connection to the ASA and have to hard boot it to get it back.I am trying to do this without my external connection connected and i have a laptop connected to the ASA on port 0/2 with an IP address of i need to connect my internet connection to it first and then run the wizard?  I was hoping to get it configured for my existing network before i plugged in the internet connection to limit my downtime.This ASA came with 6.4.1 ASDM and 8.2 OS installed.  i was able to upgrade the ASDM to 7.X but when i go to update the OS to 9.1, i get an error that i am not registered to use cryptographic software.   Dont know where i need to register to get it?

View 4 Replies


Setting Up New Work Network And Add To Already Existing One?

Jun 4, 2011

.We are setting up a new sales office where there will be between 5-10 users.At the moment, we run everything of one server which has all the file shares, printers. Active Directory etc. I know so far I will need the server cabinet - But my main concern is how I will make this new site connect to the already existing network and the other things which I will need.

View 4 Replies View Related

Cisco Switching/Routing :: 7600 Setting Up Network To Existing One

Sep 29, 2012

I am a soon to be network admin and have never set up a network to an existing network. Steps you need to add a new location to a company's network. For example if they are using 8 Building with 7600 Routers and 6500 and you need another building and they are using MPLS or Private Network, or Internet.

View 4 Replies View Related

Linksys Wireless Router :: WRT54G / Setting Up E1200 As Extension To Existing Network?

Apr 20, 2012

I have a WRT54G that has served us well for several years, but I needed a network connection in another part of the house, both wired for TV, and wireless for downstairs.  So I ran an ethernet cable through the house and connected it to my new E1200.  It's connected to Port 1, not the Internet port. The TV plugs into Port 2, and my Apple TV to port 3.  So far so good, TV and Apple TV appear to work fine.   Wireless is where I'm having problems, the wireless signals between the two routers appear on Wifi Analyzer I'm using.  Both appear strong in signal for a second, then they disappear, then they appear again for a second, then they disappear.  So the wifi's signals appear, then disappear and this cycle continues. 
The WRT54G is setup with DHCP, channel 6. 

IP Address:              Subnet Mask:              DHCP Server:    Enabled              Start IP Address:               End IP Address:
The E1200 DHCP is disabled, channel 11, 20mhz.

Router IP Address:  Subnet Mask:   DHCP Server:  Disabled  Start IP Address:   (DHCP disabled)  End IP Address:  (DHCP is disabled)

I've tried both routers named the same, and then tried 2 different names.  I've rebooted them as well after making changes. 

View 3 Replies View Related

Cisco Firewall :: Setting Up ASA 5505 To Be Used As Firewall Between BT Internet And 3560 LAN Switch?

Aug 23, 2011

setting up an ASA 5505 to be used as a firewall between a BT internet router(BTNet service) and a Cisco 3560 Lan switch. BT have presented me with a cisco 3800 series router with the following details:

Network Address   Network Mask  BTnet NTE Router LAN Address
There are 2 Gigethernet ports on the back of the router port Ge0/0 is connected to the BT NTE and the status light is flashing green. Int ge0/1 is connected into port int e0/1 of the ASA but i am unable to get any connection.

View 21 Replies View Related

Cisco Firewall :: 5505 - Setting Transparent Firewall Ip Address?

Dec 22, 2011

Trying to set up a asa 5505 in transparent firewall mode. I cannot set the management ip address:
ciscoasa> enable
ciscoasa# config term


View 7 Replies View Related

Cisco Firewall :: Setting Up DMZ On ASA 5505?

Nov 14, 2011

I am trying to set up a DMZ on my Cisco ASA 5505, so that the wireless clients are connected behind the DMZ, the LAN clients are connected behind the inside interface and both groups of clients can get to the Internet.  I have been able to configure the ASA for both wireless and LAN, but the wireless clients still cannot get to the Internet.  The LAN clients can get to the Internet.  I do not want the wireless clients and the LAN clients to be able to be able to communicate with each other. What commands do I need to run in order to allow the wireless clients to access the Internet? 

View 11 Replies View Related

Cisco Firewall :: Setting Up Port Forwarding ASA 5505

Mar 15, 2012

We are trying to setup our ASA 5505 to do port forwarding to multiple internal servers and have run into some issues. A little background on what we are trying to do.
We have 1 static external IP. Internally we have one exsisting server ( that has port 80 forwarded to it and another exsisting server ( that has port 443 forwarded to it. Both of these servers are serving seperate web apps to our employees who of course use them offsite. We have now added an additional server ( that needs to use both ports 80 and 443. Is there any way to set it up so that these ports can be forwarded to all the servers that need them? Also, how would this work as far knowing what traffic will need to go to which server even though it is using the same port?
The equipment is: ASA 5505ASA Version 7.2(4)ASDM Version 5.2(4)   I appologize in advance if what I'm trying to do is difficult/impossible. I inherted the ASA 5505 at this location and I was not here when it was initially installed. In fact no one on staff was here when it was initially installed. I did manage to find the passwords to it though. I'm not at all familiar with the ASA 5505 or Cisco secuirty appliances in general.

View 19 Replies View Related

Cisco Firewall :: ASA 5505 - Setting Up 2 LAN Networks And 2 WAN Connections?

May 16, 2013

I have an ASA 5505 with Security Bundle license.
I am able to create 2 LAN networks ( and Vlan1 and Vlan12 respectively. I also setup 2 outside interfaces (outside1 and outside2).
Network 1 ( - VLAN1) has no issues going out via Outside1, however I can't get Network 2 ( - VLAN 12) to go thru outside2.
I put in a static route (route outside x.x.x.x), the x.x.x.x is the default gateway of my ISP.                  

View 7 Replies View Related

Cisco Firewall :: Setting A Boot Image On ASA 5505?

May 1, 2011

I have an ASA 5505 that I was updating from frimware 8.04 to 8.41. Anyway, I went through the update procedure half-asleep and accidentally deleted the boot image right after I installed it (I used the CLI and put in the command del asa8*.bin then just hit enter a bunch of times, which of course means I deleted the old firmware too).
So now whenever I power up the ASA, I get the "Could not find boot file" error. Is there a guide somewhere that tells me how can upload another boot image to the ASA and set the ASA to boot it from teh ROMMON prompt?

View 1 Replies View Related

Setting Up Existing Printer And Scanner To Work Wireless

Jun 8, 2012

I need to set up existing printer & Scanned to work wire lees with wireless router that is installed in my home.

View 1 Replies View Related

Cisco WAN :: Adding MPLS With 1841 To Existing 5505

Aug 28, 2011

We currently have out T1 attached to a 5505. We have IPsec site to site tunnels that also terminate on the outside interface of the 5505.
We are getting rid of the T1 and bringing in a manged MPLS circuit which will run off of a 1841 ISR. I would like the 5505 to pretty much work as is with little change. Whats the easiest way to accomplish this? Of course the MPLS will come with new external IP.
Current Design --->    T1<------>[asa5505]<------->[LAN]
New design--------->    Mpls<------->[1841]<------>[asa 5505]<------->[LAN]
1.  Whats the easiest way to drop in the 1841 without having to change all my ASA acl's.

2. How would I terminate my ipsec site to site tunnels on asa outside interface. Now that the WAN interface is on 1841 and not ASA how would I terminate the other side of tunnel? Can I leave my tunnel end points on ASA or do they now have to terminate on 1841?

3. How would I configue outside interface on ASA to communicate out 1841 MPLS?

View 2 Replies View Related

Cisco Switching/Routing :: Implement ASA 5510 / 5505 For Existing IP Block

Jun 5, 2012

some recommendations for product selection and overall infrastructure setup for our datacenter:  We have an old, legacy setup, and are looking to replace equipment, improve performance, enhance security, and implement hardware redundancy (if cost effective).
1)  We now have (2) IP blocks from our provider, and need to support both (because we have mailers on older IPs with a good reputation rating).
2)  We have (2) aged Sonicwalls, one for each IP block, each connects to multiple internal subnets (some internal subnets need connectivity to eachother, some don't).
3)  We have (mostly) public facing web servers (Linux/Apache), as well as database servers (with no external access).

1)  Should we implement a Cisco ASA 5520 w/ or w/o SSM modules for the new IP block (for webservers)?
1a)  Should we implement a Cisco ASA 5510 or 5505 for the existing IP block (for mailers)?
1b)  Or, can we have multiple public IP blocks connected to a single ASA 5520 (or 2 ASA's w/ failover)?
2)  Can we connect both firewalls (5520 and 5510/5505) to a single Catalyst 3550 (or similar) using VLANs, and have 6 - 10 VLANs for webserver subnets, with ACLs controlling which subnets/servers can connect to eachother?
2a)  Should we implement a second Catalyst 3550 (or similar) for redundancy (webservers have multiple network cards).
3)  From our provider, we only have (1) dmark which both IP blocks connect through.  Currently we have a switch connected to the dmark in order to 'splice' the connection, and have both existing firewalls connected.  Is there a better approach to this?
4)  We would like to implement SSL-VPN, and possibly site to site IPSec VPN, but only if there will not be significant performance degredation.
5)  Other thoughts/recommendations for new features, enhanced security, or redundancy?

View 1 Replies View Related

Cisco Firewall :: Upgrade From 5505 To 5520 On Network - ASA Firewall Throughput

Feb 27, 2013

I'd like to see some REAL LIFE comparisons of ASA firewall throughput (a bit like this one for ISR G2 Routers - [URL].
The reason I ask is that I recently upgraded a firewall from an ASA5505 to an ASA5520 on a small network where the only outside connectivity was a single 10meg Internet circuit with an IPSEC VPN (not landed on the firewall but on a router) to another site.
When I swapped out the firewall the users noticed a big improvement. The firewall is not doing anything out of the ordinary - no IPS or VPN, just standard state full inspection.

View 5 Replies View Related

Cisco Firewall :: Add New Vlan In Existing Firewall Group In 6500?

Jan 19, 2013

I want to add new vlan in existing firewall group in 6500. I am confused if it will add new vlan or overwrite.. I am using ASASM module with 6500.

View 3 Replies View Related

Cisco Firewall :: Use ASA 5505 Between Two Network Segments?

Nov 29, 2012

I am using Cisco ASA 5505 between my two network.

1) I want LAN user can go to access network but cant access network

2) what interface nameif will be or security Laval

3)what access list should be configure

4)what IP route should be used

View 3 Replies View Related

Cisco Firewall :: ASA 5505 / How To Direct A 2 Sub Network To 2 Different ISP

Jul 26, 2011

With an ASA 5505, i would l like to guide a sub network to an ISP and another sub network to the other ISP.i have 2 differents ISP.My major problem is the metric. I tried with access-list command to force the way out, but it seems that "metric" is stronger than "access-list".I don't know how to manage such LAB. is that possible with ASA 5505 appliance?

View 9 Replies View Related

Cisco Firewall :: ASA 5505 - Cannot Access Anything On Pix Network

Nov 29, 2012

Cisco ASA 5505
Cisco Adaptive Security Appliance Software Version 7.2(4)
Device Manager Version 5.2(4)
I have and vpn tunnel between a pix network ( and an asa network (; it's been running fine for awhile now but this morning i've come in an i can not access anything on the pix network, (mail, file & web servers). Each attempt to access results in a SYN timeout.
6 Nov 30 2012 14:24:01 302014  Teardown TCP connection 6014 for outside: to inside: duration 0:00:30 bytes 0 SYN Timeout

View 10 Replies View Related

Cisco Firewall :: ASA 5505 How To Map SSH From Outside Network Range To Internal

Feb 21, 2013

I have a Cisco ASA 5505 (version above) and I have someone that needs to SSH into a box behind the ASA. I'm having a few issues trying to configure this access-list and NAT. I've tried many combinations and clearly my IOS is not as good as I thought. What commands should I enter to accomplish mapping SSH from an outside network range to an internal host ?

View 5 Replies View Related

Cisco Firewall :: ASA 5505 Configuration Cannot Get To Internal Network

Jan 25, 2012

I now need to configure an ASA 5505 for a small server farm.  It's fairly straightforward:isp -> asa5505 -> internal servers,'m using static addresses -- no DHCP involved.VPN works;  I can get into the internal network.pinging from the ASA to an external address works,However, I cannot get from a laptop connected to an internal port out to the internet, either using ping or typing an address in the browser.

View 7 Replies View Related

Cisco Firewall :: ASA 5505 Configuration For Home Network

Sep 4, 2012

I've been trying to configure a cisco ASA 5505 for my home network but I'm not having much joy with it. I've looked at countless guides, tutorials and followed the ASA setup wizard in ASDM. The Cisco 1841 is running sub-interfaces for my VLAN's.

View 4 Replies View Related

Cisco Firewall :: ASA 5505 To Allow 2nd Network Segment Through Mpls

May 31, 2013

I have been having a heck of a time trying to configure my 5505 to allow the second segment on my network to use the internet. Office 1 has a fiber internet connection, and all traffic flows fine. Office 2 had gotten it's internet from AT&T, via a network based firewall injecting a default route into the mpls cloud. both offices connunicate to each other through the mpls.
When we added the fiber to office 1, we had the mpls people change the default internet route to the inside address of the 5505 and things worked fine. when AT&T attempted to remove the NBF defaut route, and inject the 5505's address as default, things didn't go so well.
AT&T claims that it is within my nat cmmands on the 5505, but won't tell me anything else.  I assume that they are correct, and I assume that I am not good enough with the 5505 ASDM to tell it what to do.
Office 1 uses 10.10.30.xx addresses and Office 2 uses 10.10.10.xx - the 5505 inside interface is the internal interfaces of the mpls are and

View 21 Replies View Related

Cisco Firewall :: ASA 5505 - Adding New Rule For Network?

Mar 30, 2011

I have an asa 5505 and I would like to adding a new rule for a network, however it was added, it seems it would be inactive. I have two inside network, (name: lanA) and (name: lanB) I have the following in the running-config:
access-list lanB_acl line 1 extended permit ip any
access-group lanB_acl in interface lanB_interface
But when I tried to reach a host in the lanA, the packets are dropped. I configure the asdm, which shows this on the LanB interface:

1 lanB_network | any | ip | permit (hits 344)
2 any | any | ip | deny
 and I checked the packet tracer with: tcp, source: dest: and it shows that the packet has been dropped by the last 2. 'implicit any any ip deny' rule, in spite of my access-list rule (access-list lanB_acl line 1 extended permit ip any) preceded it, and active.
The lanB and lanA interfaces are the same security level 100, and I can reach the outside/internet from Is it possible that I have to reload the rules or something like in order to apply? Or I missconfigured something?

View 9 Replies View Related

Cisco Firewall :: Can't Create Network Objects On ASA 5505

May 17, 2011

I have a customer an exisiting 5505 which connects to multiple sites for a site-to-site VPN.  This firewall was not installed by myself originally I have just been asked to take a look now.The situation is that we now need to edit one of the existing site-to-site VPNs to include the remote sites expanded network.  I have tried doing this through the ASDM and have found that I cannot add new network objects.  I have tried creating a new network object group and then added the new networks from there but I am completely unable to add the new objects.I believe a picture tells a thousand words in this case so I have attached some images which show the problem.  I have also tried going through the VPN wizard, this also does not allow me to add new network objects. 

View 2 Replies View Related

Cisco Firewall :: ASA 5505 / Network Systems Cannot Access Internet

Nov 14, 2011

What should i do on my Cisco ASA 5505 firewall to grant access to my network systems to access internet via gateway. I use ASDM to configure the firewall.

View 5 Replies View Related

Cisco Firewall :: ASA 5505 Cannot Ping Secondary Internal Network?

Jan 15, 2012

Cisco ASA 5505 Cannot Ping Secondary Internal Network.

View 9 Replies View Related

Cisco Firewall :: ASA 5505 - Configure Communication From Inside Network To DMZ

Nov 30, 2011

ASA 5505 and DMZ, I have a Base License.
What do I need to do for access inside network to DMZ?
I successfully configure, internet Access for DZM and inside network, web server can be accessed from internet, but I have problem to configure communication from inside network to DMZ.

View 14 Replies View Related

Cisco Firewall :: ASA 5505 - Nat Internal Network Before Sending Over Tunnel

Oct 27, 2011

For a customer I have configured a new ASA 5505 firewall with 8.42 software. I had to build 3 ipsec tunnels to different locations and firewalls. All tunnels are working except one. I have to translate the inside network 1 to 1 to a different private range before it is sent over the tunnel. Each host from network /24 has to be translated to a /24 host and then sent over the tunnel. (e.g. translated to

View 3 Replies View Related

Cisco Firewall :: 5510 Get Files From Existing Flash Onto New

Jun 5, 2013

In order to do a flash upgrade on a 5510, is there any way to get the files from the existing flash onto the new flash before you replace existing flash? Is there an online procedure?

View 2 Replies View Related

Cisco Firewall :: 5520 Unable To Add Another Line To An Existing NAT ACL

Mar 26, 2013

As part of our PCI compliance, we were required to add a line to all of our ACLs in our ASA 5520 running version 8.2(3). Though there is an implicit deny all, we had to add a line to deny from any source to any destination.We had no problems in adding the additional deny all statements except for our NAT access-list. This NAT access list is used for our internet connection.Currently, the NAT ACL has 4 entries to permit from a specified source to destination any. This ACL is then called on our NAT statement.nat (inside) 1 access-list NAT,Also, note that NAT control is in place and we also have NAT zero statements for our VPN connections.So to fulfill our requirements, we just had to add another line to our ACL entries. But we encountered an issue with our NAT acl.

View 10 Replies View Related

Cisco Firewall :: 5505 Server Looses Network Access When Vpn Is Active

Sep 27, 2012

When I start a VPN-session my server looses internet access. The server is host for a few virtual machines and they have internet access.using 5505 and asa is version 8.4(2). [code]

View 6 Replies View Related

Cisco Firewall :: ASA 5505 / DNS Not Resolving To New Machines On Network After Increasing DHCP?

Aug 14, 2012

I am having a very strange issue with connecting new machines to reach the internet.We have a ASA 5505 which the previous tech configured the DHCP pool to -
We ended up reaching our limit which I changed it to: - 192.168.187
Then next day when I arrived to work, our DC was hung from windows updates. Once we got everything back up, every computer currently on the network can reach the internet/VPN tunnels etc. So (continuing with my day) I created a new server in a VM (Hyper-V)I can ping everything internally (even the router), but I cannot resolve DNS. I have configured a static IP, tried Dynamic IP.I have looked for any ACL indicating to block outside the range of the old DHCP pool but no luck.On my local maching I can ping the DNS addresses, but just not on the new server.

View 1 Replies View Related

Cisco Firewall :: ASA 5505 - Connect Single Internal Network To Internet?

Aug 23, 2012

I have configured an ASA 5505 to connect a single internal network to internet, it is not working. I have attached the config

View 9 Replies View Related

Copyrights 2005-15, All rights reserved