Configuring an ASA Firewall on Cisco Packet Tracer - Part THREE

[@captaincommando9839]

I gotta thank you for these tutorials. This has been one of the most helpful resources Ive encountered and its helped me a great deal.

[@GregSouth]

Hi again @captaincommando9839 Thanks so much for your kind words! I really appreciate your support!

[@liweishi5931]

The explanation is an epiphany to me, ASA 5505 configuration on PT was a big puzzle until I found your video. Big Thanks!!

[@GregSouth]

Glad it helped @Li Weishi!

[@nickas222]

You are a GOLD my friend i will pass my exam just because of you THANKS A LOT

[@GregSouth]

Glad it helped Paul and good luck in your exam!

[@amineahmane8136]

Thanks Greg

[@lanceowen3370]

Hi Greg thank you again for all your work, I think I understand how the class map, object map and service policy are all connected. I am confused about the line 'match' default-inspection-traffic'. What does this line do? Thanks heaps

[@GregSouth]

Hi @Lance, glad the videos helped - here is a link that goes into a lot more detail in service policies using Modular Policy Framework. Also has detail re: default-inspection-traffic command - hope this helps. www.cisco.com/c/en/us/td/docs/security/asa/asa97/configuration/firewall/asa-97-firewall-config/inspect-service-policy.html

[@dinushalokuwithana4215]

Actually very informative. If you can explain the scenario more detail, which the commands being used, the lesson would be more helpful.

[@GregSouth]

Thanks for the feedback Dinusha!

[@ivanvincentcantero6599]

Good tutorial

[@kitaspidate5835]

SUPERV JOB. very good attempt. only thing, u could have put a video containning the lab devices buiding,connections,ip assignments as well. coz now only i saw ,u have given all those in a google drive file, but it would be better, if u put those links in ur video description as well as in the video itself. coz ur tremondus effort could be hidden bcoz of this confusion on circuit setup, like ISP side ip assignments not shown in video, but u have shared the file fully everything, but dont know how many of the viewers miss to see that. thats y. very nice work. thanks a lot.

[@kitaspidate5835]

hi i made ur fw guided as per multilayer swh with various vlans, but i couldnt succeed, i can ping from inside pc to inside fw , also from outside isp pc to outside vlan of fw, cant go from inside pc to outside rtrs. if i give the pkt trcr file, can u trouble shoot n figureout ,whats wrong, maybe my static routing , bt im not sure. how to send? can i have ur email pls? this would be a big help for me

[@GregSouth]

Hi Kit, thanks for your feedback - keep trying! This is where the learning takes place!

[@thepuldarshana9056]

could you do a ASA redundant (fail over configuration ) please ?

[@saqibnagauri]

Hi Greg, Can You sued ACL instead of class map to allow ICMP ?

[@GregSouth]

Hi there, there is some excellent examples of setting up ACLs here : www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/firewall/asa_91_firewall_config/mpf_service_policy.html - i hope this helps. Greg

[@saqibnagauri]

@@GregSouth I just used ACL instead of classmap and it worked fine.

[@GregSouth]

@@saqibnagauri Brilliant! Well done

[@saqibnagauri]

@@GregSouth Thanks Greg. What other video do you suggest for practicing my ASA skills. And also I wish to learn fortinet firewall. What do you suggest ?

[@eyadabuelezz1196]

I can't find the video for the last part of configuring the DMZ

[@GregSouth]

Hi @eyadabuelezz1196 , here is the complete playlist so you can choose which video to view. All the best, Greg kzbin.info/aero/PLK-Bs6BGQBEP4HUmB1g27aIL4EPyXeLNx

[@juancamilomedinagarzon1375]

hey friend could you help me with my topology it is not working I am doing the same as yours.

[@malikamvs7618]

bro u r awesome only one question how u did the configuration of the routers

[@nickas222]

this is the preconfigured config there is packet tracer file in the description in the first part

[@khadijabou4821]

@@nickas222 so you mean i should configure the routers after this configurations?

[@GregSouth]

Hi @KhaDija BOU - you can find the link to the configurations here: kzbin.info/www/bejne/iX29hGSjiMiSjLs. All the best. Greg

[@pfeifenderleidender7320]

How would I use a DNS server with the ASA? I need more than 30 ip addresses.

[@GregSouth]

Hi @Pfeifender Leidender If you do a ‘show version’ on the ASA, you will see the platform has a base license. In the output of this command, you will see the licensed features for this platform - it mentions 10 inside hosts. If the limit is 10 hosts, the maximum available DHCP pool is 32 addresses. More information can be found here: community.cisco.com/t5/network-security/asa-5505-dhcpd-limit-of-32-addresses/td-p/1581129 Hope this helps. Greg

[@Nk-cy1cu]

what it means is you dont have to write those dhcpd commands your second pc will take dhcpd assigned address by default

[@GregSouth]

Thanks for the feedback. Good point network knowledge- however this configuration can be changed to meet admin user preferences

[@fxhacked]

where is part 4 and 5

[@GregSouth]

Hi there, I squeezed both part 4 & 5 into this video - kzbin.info/www/bejne/pnO6Yotsp5qehK8