


Username jeff password xxxxxxxxxxxxxxxxxxxxxxx encryptedĭestination address email transport-method http No threat-detection statistics tcp-intercept Snmp-server enable traps snmp authentication linkup linkdown coldstartĬrypto ipsec security-association lifetime seconds 28800Ĭrypto ipsec security-association lifetime kilobytes 4608000ĭhcpd address 10.10.10.100-10.10.10.130 inside Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absoluteĭynamic-access-policy-record DfltAccessPolicy Icmp unreachable rate-limit 1 burst-size 1Īccess-group acl_outside in interface outside Passwd DU.xxxxxxxxxxxxxxxxxxxxxxxxx encryptedĪccess-list acl_outside extended permit icmp any any object-group DefaultICMP Here is an example of complete configuration:Įnable password DU.xxxxxxxxxxxxxxxxxxxxxxx encrypted Sw1# description Default ICMP Types permitted In this case you can assign Google DNS server or your internet provider’s DNS server.Ĭreate a permit for ICMP to allow ICMP traffic. Sw1# nat (inside,outside) dynamic interfaceĪll devices which connected to ASA 5505 will need a DNS server to resolve the address. Sw1# access-group acl_outside in interface outside I will show you how to configure NAT on version 8.2 and 8.3. Sw1# dhcpd address 10.10.10.100-10.10.10.130 insideĪSA 5505 on OS version 8.3 has different syntax in configuring NAT, if compared to OS version 8.2 and previous.

You can repeat configuration on ethernet 0/1 to other interfaces to assign VLAN 1.Īfter assigning ethernet 0/1 to ethernet 0/7 as your LAN ports, then you need to enable DHCP to assign IP for each port. In this example, I configured my internet connection (VLAN 100) on port ethernet 0 and other ports are assigned for my LAN (VLAN 1). The name of VLAN 1 is inside and the name for VLAN 100 is outside.Īfter creating VLANs, you can continue by assigning the created VLANs to desired interfaces. In this example, I configured VLAN 1 for my LAN and VLAN 100 for my internet connection.

Configuring Cisco ASA 5505 as your home or small business internet gateway is not that hard.
