The factory default settings for ASA5505 are the following: If this is the case, then the factory default configuration of your ASA will not work. That is, the outside interface of the ASA will be connected to the LAN interface of the W20.

I assume that you want to connect the ASA5505 behind the W20 Ericsson. Here is also a new article I’ve written for a basic and advanced Configuration Tutorial for the new ASA 5506-X model. Of course there are much more configuration details that you need to implement in order to enhance the security and functionality of your appliance, such as Access Control Lists, Static NAT, DHCP, DMZ zones, authentication etc.ĭownload the best configuration tutorial for any Cisco ASA 5500 Firewall model HERE. The above steps are the absolutely necessary steps you need to configure for making the appliance operational. The PAT configuration below is for ASA 8.3 and later: NAT (static and dynamic) and PAT are configured under network objects. The “global” command is no longer supported. This version introduced several important configuration changes, especially on the NAT/PAT mechanism. Step 5: Configure PAT on the outside interfaceĪSA5505(config)# global (outside) 1 interfaceĪSA5505(config)# nat (inside) 1 0.0.0.0 0.0.0.0įrom March 2010, Cisco announced the new Cisco ASA software version 8.3.

Step 4: Enable the rest interfaces with no shut Step 2: Configure the external interface vlan (connected to Internet)ĪSA5505(config-if)# ip address 200.200.200.1 255.255.255.0ĪSA5505(config-if)# switchport access vlan 2 Notice from the diagram that port Ethernet0/0 connects to the Internet, and ports Ethernet0/1 to 7 connect to internal hosts (PC computers etc). The diagram below illustrates the network topology for the configuration setup that we will describe. Let’s see the basic configuration setup of the most important steps that you need to configure.

That is, you can not configure the physical ports as Layer 3 ports, rather you have to create interface Vlans and assign the Layer 2 interfaces in each VLAN.īy default, interface Ethernet0/0 is assigned to VLAN 2 and its the outside interface (the one which connects to the Internet), and the other 7 interfaces (Ethernet0/1 to 0/7) are assigned by default to VLAN 1 and are used for connecting to the internal network.

Cisco asa 5505 throughput