Solved

Configuring the ASA5510 to connect with the DSL Modem for Wan Connection and Switch for the Lan

Posted on 2014-01-14
2
732 Views
Last Modified: 2014-01-16
I currently have a DSL modem which is configured with static routing and connects to the switch where I have a number of device, till there everything is working fine, I have bought an asa 5510 so I can have remote sites connecting with it through VPNs. I want to configure the asa 5510 to receive WAN Connectivity from the DSL Modem which is Cisco EPC3925, This modem is currently configured with static IP routing. What I have tried to do is to set it as a bridge mode only and configured the following configurations on my ASA:  

ASA5510(config)# interface Ethernet0/0
ASA5510(config-if)# nameif outside
ASA5510(config-if)# security-level 0
ASA5510(config-if)# ip address 213.165.177.76 255.255.255.224 (My Static IP address provided from the ISP)
ASA5510(config-if)# no shut


ASA5510(config)# interface Ethernet0/1
ASA5510(config-if)# nameif inside
ASA5510(config-if)# security-level 100
ASA5510(config-if)# ip address 192.168.0.1 255.255.255.0
ASA5510(config-if)# no shut


ASA5510(config)# global (outside) 1 interface
ASA5510(config)# nat (inside) 1 0.0.0.0 0.0.0.0

ASA5510(config)# route outside 0.0.0.0 0.0.0.0 213.165.177.65 1 (ISP Default Gateway)

ASA5510(config)# dhcpd dns 212.56.128.132 (ISP DNS Server)
ASA5510(config)# dhcpd address 192.168.0.10-192.168.0.200 inside
ASA5510(config)# dhcpd enable inside

I have tried this but it haven't worked, I have another DNS Server I haven't used which is 212.56.128.132, if this can help. I have set the IP address of the internal switch to static  which is 192.168.0.205. Sorry I am quiet new to this field.

Thanks in advance for all your help.
0
Comment
Question by:bixkli
2 Comments
 
LVL 36

Accepted Solution

by:
ArneLovius earned 500 total points
ID: 39781215
What version is the ASA running?

Your config would be good for versions lower than 8.3

I don't configure firewalls to use external DNS, I always use an internal DNS server.

If you are not able to traceroute over the ASA to the Internet, you might need to specifically allow ICMP, or it could be an issue with your DSL modem in bridge mode.
0
 

Author Closing Comment

by:bixkli
ID: 39785107
The ICMP Worked but I have to add also the dns lookup server and enter specifically the dns. Thanks for all your help :)
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
Cisco Pix/ASA hairpinning The term, hairpinning, comes from the fact that the traffic comes from one source into a router or similar device, makes a U-turn, and goes back the same way it came. Visualize this and you will see something that looks …
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now