Posts

Showing posts from September, 2020

Configuring NAT on the Cisco ASA

Image
In this article, we will take a look at how to configure different types of NAT on the Cisco ASA post 8.4 software code. Accompanying this post is a video demonstration covering what has been discussed in this article. We will cover the following types of NAT: Static NAT Dynamic NAT Dynamic PAT Identity NAT Before jumping into the demonstrations I will explain the purpose of each type of NAT on the Cisco ASA. Overview of NAT NAT addresses can be defined as the following: Inside local address: This is the IP address that is assigned to a host on the inside of a network. The inside local address is most certainly bound to fall within the RFC 1918 reserved private IP address spaces. Inside global address: This is a globally routable IP address (public IP address) that can represent one or more inside local IP addresses to the outside world. Outside local address: This is the IP address of an outside host as it appears to the inside network. Outside global address: This is the IP addre

Configuring Cisco ASA Active/Standby Failover

Image
In this article, I will share the configurations used in the within the video below. The configurations enable one to configure Active/Standby ASA’s with failover and redundant failover links. ASAv1 Configurations interface redundant 1 member-interface g0/0 member-interface g0/1 no shutdown#Interface G0/0 no shutdown#Interface G0/1 no shutdown Configure failover settings on ASAv1 failover lan unit primary failover lan interface redundant 1 (This is the interface used for the failover link) failover interface failover redundant 1 (‘failover’ = the name I gave the failover interface redundant 1) failover interface ip failover 10.0.0.1 255.255.255.0 standby 10.0.0.2 failover key cisco (Key needs to match on both ASA’s) failover (Enables failover) write memory (Save your configuration) Configure Basic Device Settings interface g0/2 nameif OUTSIDE ip address 172.16.235.2 255.255.255.0 standby 172.16.235.3 no shutdown#Interface g0/3 nameif INSIDE ip address 192.168.10.1 255.255.255.0 standb