Cisco ASA 5505 configurations

[Senad]

For those who are interested in implementing a hardware firewall on their servers in the future (Mainly our Cisco ASA product line) I've written a quick little article on what the standard and recommended options we have available for our 5505 product line. Althought it is not technically available to order via our order forum customers can request the Cisco ASA by contacting our sales department.

The article can be found at:
https://support.steadfast.net/index....atingconfirm=1

[thanhtike]

Dear Sir,

I configured ASA 5505 as Cisco website suggestion procedure, but I cannot use VPN access from outside computer. So can you give me advice what NAT rules and security policies need to configure. And what ports I need to allow at ASA 5505.

Kindly appreciate for your detail advice urgently. Thanks a lot.

With Best Regards,
Nelson

[najeebsyed2]

Hello,
I had a question about the Cisco ASA5510. Is it possible to define multiple AAA servers on the firewall? And most importantly, is it possible to associate a particular profile/tunnel group to use a particular AAA server for AAA services? Thank you in advance.

[Senad]

Hi Najeeb,

Yes this is all very much possible with the ASAs.

Regards,
Senad

[netleets]

thanhtike
I have an ASA VPN guide in my forums on the site in my signature. However if you post your desired VPN setting I will be glad to assist you. Please provide the local and remote networks that will participate in the vpn, the remote peer ip address, the encryption and hash method, and authentication method.

[cisco-tips]

Your website is down. I would love to see a VPN guide for a lan-to-lan ipsec vpn.

thanhtike
I have an ASA VPN guide in my forums on the site in my signature. However if you post your desired VPN setting I will be glad to assist you. Please provide the local and remote networks that will participate in the vpn, the remote peer ip address, the encryption and hash method, and authentication method.

[Ihoj]

In a small environement, default configuration of the ASA 5505 is not allowing internal clients to connect to the Internet.
When I peruse the router config, I discovered that they have a local DNS box, which is hosting their Mail Server as well, this machine is statically nat'ed as follows:
RTR800(config)#ip nat outside source list static 192.168.i.h a.b.c.d
where a.b.c.d is the 2nd public IP address. How do I translate this nating into ASA 5505?
Is double nating [RTR(nat'ed)<----->ASA5505(nat'ed)] the recommended approach in this case?

I