ASA 5506-X Basic Configurations

[@JM-pw9cu]

Thank you for the tutorial. Just a tip if anyone has trouble in making it works. 10:58 in the newer version of packet tracer 8.2.2, the service-policy command is added already. Proceeding will cause a warning and prevent the policy working, delete it first by putting "no" keyword in the front.

[@우에스더-z1r]

"no service-policy global_policy global" 명령어 입력을 하여 이전에 적용되었던 명령을 삭제하고 다시 "service-policy global_policy global" 명령어를 입력하니 제대로 동작합니다.

[@giftlekalakala6366]

how, I'm trying this its still not working?

[@IchBinAmLeben]

Explained in a concise manner, and the accent, pronunciation and enunciation should be the goal of everyone wishing to do a tech video. Excellent!

[@junrenchen4492]

Prof Saleh, you don't need to reply my previous msg. I just found out that Packet Tracer can be very unstable. Thank you for your videos. After many tries, when I go back to my previous file, it just work without any changes. I also managed to get outside network to access to DMZ FTP & Web Servers. Thank You!

[@Gunslinger088]

Thanks, Saleh. My first security lab practice. It worked very well.

[@ogboabeyone]

thanks for this video, it short with great meaning and impacts

[@glenntembo2693]

Thanks always Saleh, welcome back Sir

[@dystopian_1]

Worked like a charm. Thank you!

[@samstone4196]

I have no words to thanks you but thank you sir

[@issamnaouali1574]

Hi I have à question what i have to do yo ping my router and asa outside from gns3 ?

[@jhayadevbaral2218]

I had configured inside and outside address opposite. Thank you it worked

[@junrenchen4492]

Prof Saleh, why is it that I added inspection icmp command to the global policy but my ping packets kept on stuck at ASA even though, the destination address at simulation event is directing to the PC? I checked every commands related to glabal policy, class mapping ...

[@ogboabeyone]

i can't ping anything outside the firewall despite that i followed your steps from A to Z including using the same ip addresses that you used here but yet i can't ping my router and server, i got all these (dns, http and icmp) in my server but yet i can i not ping server from inside pc . What should i do next

[@GA-tl4iy]

Thank you so much Saleh for a great video. Can you please make a video for three zones INSIDE, OUTSIDE AND DMZ PLEASE. Thanks brother

[@zelalembekalu]

I use ciscoasa 5506 firewall devices the command all works well but when I try to ping the dns server it does not respond why

[@GA-tl4iy]

Thank you so much Saleh, this video is amazing , helpful and great for me as a beginner. Thanks again and God bless.

[@hamayoonnawabzada2838]

Hi Sir I have a problem when. I configure ASA 5506X interfaces and saving the configuration after closing packet tracer topology. When start again the topology firewall show its interfaces in down state.

[@aivanlozada3004]

I can't ping the dns icmp and http just like other problems that i read in the comment. does anyone tell me whats the problem? or maybe the version of his packet tracer is outdated? coz im using updated maybe thats the reason?

[@markvillanueva5358]

Thank you for sharing your knowledge Sir.

[@jserr9682]

Great tutorial. question how about the ip address for the switch

[@saltech2024]

What about in the case where the outside access list of of the firewall has three routers, VLANs together with classless sub networks? ie ciscoasa---->> R1 ---->> R2 ---->> R3 ---->>SW1 ---->> VLANs (classless sub-networks)?

[@MacCaraX]

I can't do ping with dns. PCB request timed out. And doesn't appear the http ping

[@mohammedalrawe3535]

The best 👍🏻👏🏻 you make things easier tbh, thanks you so much Sir, i hope if you can make a video for the 3 zones INSIDE , OUTSIDE and DMZ with more than one ASA.

[@ShaunDan]

Yes This is a Good one If you can do

[@alisalman-lo7km]

hi,does anyone know how to solve this issue:WARNING: Policy map global_policy is already configured as a service policy

[@An-xv1jo]

Sir i tried again on this again, but cannot ping 8.8.8.8 , what could be the reason ?

[@MrSaleh970]

Salam dear, make sure the ports are enabled, and that you configure the default route for outside on the ASA, if you still can't ping, please send me a message on Messenger, and will help you out, wishing you a blessed day. S.

[@An-xv1jo]

@@MrSaleh970 Salam Sir. Thank you so much for your prompt reply. Yes the ports are all enabled, I been trying in and out but cannot get an idea why so this happens with all ASA labs. 8.8.8.1 gets pinged in all cases but not .8. Really need your help to get thru this. How to contact you on messenger ? Greetings and have a great day, Anand

[@zeeshanbasharat5361]

assign IP to DNS server statically 8.8.8.8 255.0.0.0 default gateway 8.8.8.1

[@An-xv1jo]

Thank you bro Ramesh, it worked, great, thanks alot

[@phenaphosa4785]

sweet work. I like when you do the configurations and you add the step by step documents and packet tracer file, than the step by step documents and packet tracer file without you doing it. am new to this tho. Great work.

[@Remo_Creations]

I am CCNA completed. I want to learn Firewall. Your vedeo is Great, and easy to uderstand.

[@maharjan_sakin]

Thank you sir for your explanation. It really helped me

[@lohti6399]

The network is /24 and /30 .. How can the network see each other ?

[@omarbenazza]

Merci beaucoup monsieur salah

[@diamondfacilities7259]

Thank you , saved my day

[@gregoryadolphine339]

Also, if we are matching default-inspection-traffic which seems to include well know port numbers, why do we still have to go an inspect (allow) each one?

[@jmhm17]

Great stuff wish there was more context around the syntax tho, I don't follow the "inspect" logic. Why is it not just "permit"?

[@tufuefiso2820]

Thank you sir, very helpful

[@helaoueslati5937]

Thank you, valuable lab

[@syedabitheen600]

Sir, your videos are Awesome. however Little bit more explanation will be expected for some commands. your Lab manuals and Files are great helpful

[@zadkieladdae8145]

Good work as usual.

[@sharwandalal9739]

Hi Sir if possible please make a detailed configuration video on Asa 5506 x complete video

[@wadep]

My ASA seems to still be blocking the ICMP. After creating the class map I still connot ping 8.8.8.8 from either PC. Thoughts? the ports are enabled

[@wadep]

also getting the warning WARNING: Policy map global_policy is already configured as a service policy

[@nau_hazmi7425]

​@@wadep you fix that buddy ?

[@AntonBuketov]

@@nau_hazmi7425 did you find solution?

[@scott2495]

What command would you do to inspect all service protocols by default rather then creating individual entries to inspect dns, http, icmp?

[@mukharjirachapudirachapudi8796]

each one is policy based

[@yvesmugisha5634]

use these commands policy-map global_policy class inspection_default inspect then the ASA will inspect common protocols by default.

[@thepuldarshana9056]

can you do a vpn connection configuration with ASA and other remote location ?

[@teknotouc2155]

You Mail addres ?

[@abyanfaishal]

hello sir, can make another video with inside outside and dmz, im struggling with asa pls help me

[@anba9818]

I have been configured the same topology and I save the configuration but when I close the packet tracer and enter the file i find the DHCP works fine but the DNS in the PCs not configured and I can't access the web. any help? why the DNS becomes 0.0.0.0

[@MrSaleh970]

Salam Anas, start over you work from scratch, and follow the walk through document, and to have further help, see one of my latest videos about ASA 5506.

[@anba9818]

@@MrSaleh970 it's from the scratch and i follow the steps , before i close the packet tracer file , everything works fine . the problem when i close it and reenter it the DNS change to zeros but the DHCP work fine

[@MrSaleh970]

@@anba9818 did you save your work before you close packet tracer?

[@anba9818]

@@MrSaleh970 yes i did

[@brbiitstaff3032]

@@anba9818 you must copy run start each device

[@brodakebangoura6438]

Hello sir please I needed your help because of project of end my engineering cycle I work on ASA5505

[@ivanrished5228]

I would like to watch configuration of DMZ

[@varshithreddy8236]

what is mean by security level (0,100,70) what was the use of that..? can anyone explain please

[@mukharjirachapudirachapudi8796]

security level ranges from 0-100 ,100 is trusted; the lower level the security is the less trusted zone it is.

[@gregoryadolphine339]

What gives? I did the same configuration in packet tracer and the pings would not go through. When i do a simulated ping, packet tracer says "The ASA does not allow any traffic from a lower security interface to a higher security interface unless it is explicitly permitted by an extended access list." Any ideas? object network LAN subnet 192.168.1.0 255.255.255.0 ! ! object network LAN nat (inside,outside) dynamic interface ! ! ! ! class-map inspection_default match default-inspection-traffic ! policy-map global_policy class inspection_default inspect icmp ! service-policy global_policy interface outside

[@MrSaleh970]

Hello Gregory, sorry for the late respond, but i will do a thorough lab with walk through documents with explanations, once again, sorry for being late.

[@sudipdas-jd4my]

great job

[@uksheffeild7979]

thanks sir for that have you done but why do you not make a video on each suggestion like ( Configure Clientless, Cisco Anyconnect, and Site to Site VPN With ASA Firewall) ,ASA MPLS VPN, ASA redundancy , or ASA virtualization .

[@mdarman2682]

thanks , easy to understand

[@christmvouenze1071]

why dhcp option 3 IP command?

[@yvesmugisha5634]

used for default-gateway whereas for dns is option 6.

[@DineshKumar-vu6dx]

How to ping from outside to inside it's not working please help me

[@MrSaleh970]

Hello, Please follow the walk through documents, and check your work as you go.

[@An-xv1jo]

i tried two of your labs (the above one and the one where all configurations are there) but am not able to ping server in any case, after giving the exact comments in packet tracer, all your labs used to work for me but not for this asa configs.

[@MrSaleh970]

Hello, did you follow the walk through documents? download both files, the P.T. and the word documents,and follow through, and when you are done with your configurations, try to run some show commands to make sure you did the right configurations.

[@An-xv1jo]

thank you @karthik ramesh, it worked brother. i am going to ask you a small favor, i checked for packet tracer 6.2 from netacad but they have taken out it seems, i prefer to download directly from netacad website, anything you can suggest to get 6.2 version ?

[@meetparekh7407]

Thank you so much

[@jhayadevbaral2218]

i have issue that i can't ping 8.8.8.8 server though everything look fine

[@thuanminh2810]

thanks a lot

[@AntonBuketov]

I want to write to other people who will watch this tutorial, don’t watch it - it doesn’t work. This guy glued it together somewhere in the middle and everything works for him. All the other dudes who wrote here were either bought or bots. The real comments that are here also encountered a problem, in the end he sends them to the stolen manual. Conclusion - don't watch.

[@bhimgrg05]

Thank you sir !!!

[@babyalonoeabdullah7672]

Thank you Sir

[@luisverenzuela3932]

Thanks Saleh

[@khmernetworkinglearning5621]

👍

[@anba9818]

thhhhhhaaannnnk you so much

[@cavourtadjouteu8084]

super

[@amosantoine9606]

Wow

[@easyeng-learnenglishthroug5938]

Not pinging dns

[@xpromatrix4499]

it is not big deal just give the network with multiple vlans in multilayer switch them show the demo. unsatisfied

[@leothalion3983]

Thank you so much