PC1#lynx iniciate http connection with serverĬonfiguration PC1 ifconfig INT4 192.168.0.100 netmask 255.255.255.0 Inside -> outside SERVER#ping 10.0.0.100 ping PC1 from serverį2) After access lists application outside -> inside PC1#ping 10.0.0.253 ping firewall MGMT address PC1#lynx iniciate ftp connection with server PC1#lynx iniciate http connection with server - this traffic is permitted by default. PC1#ping 10.0.0.253 ping firewall MGMT address F1) Before access lists outside -> inside ASA1(config)# debug icmp trace turn on debugging for icmp You can get similar results from graphical web browser from Linux and Windows.
Pictures are taken from text web browser lynx. 2)Apply access lists ASA1(config)# access-list FWRULEIN permit icmp any anyĪSA1(config)# access-list FWRULEIN permit udp any any eq 20ĪSA1(config)# access-list FWRULEIN permit udp any any eq 21ĪSA1(config)# access-list FWRULEIN permit tcp any any eq wwwĪSA1(config)# access-list FWRULEIN permit tcp any any eq ftpĪSA1(config)# access-group FWRULEIN in interface outside SERVER(config)#line vty 0 4 enable tenlnet connections ASA 1) Firewall settings ciscoasa(config)# hostname ASA1ĪSA1(config)# firewall transparent set up firewall in transparent modeĪSA1(config)# ip address 10.0.0.253 255.255.255.0 set management IP address for Firewall deviceĪSA1(config)# debug icmp trace turn on debug for icmp traffic thru firewallĬheck connection as you can see in Function test before applying access lists. SERVER(config)#ftp-server topdir FLASH:/ set top directory for FTP server SERVER(config)#ftp-server enable enable FTP server SERVER(config)#ip http server enable HTTP server
#CANNOT PING ASA THROUGH EASYVPN PASSWORD#
SERVER(config)#enable password cisco set enable password for privileged mode SERVER(config)#username cisco password cisco authenticate by this username and password SERVER(config)#aaa authentication login telnet local authenticate locally SERVER(config)#aaa new-model define authentication policy Route add default gw 10.0.0.1 dev int3 set default gw SERVER SERVER Configuration PC1 ifconfig int3 10.0.0.2 netmask 255.255.255.0 set IP address
0 kommentar(er)
