The diagram below shows a simple 2 interface firewall configuration based on a Cisco ASA 5505 with the firewall acting as a gateway to the Internet for a private LAN network. Configure Port Address translation for Inside NetworkĪSAv(config)# object-group network Inside_Network ASAv(config-network-object-group)# network-object 192.168.10.0 255.255.255.0ĪSAv(config)# nat (inside,outside) source dynamic Inside_Network interfaceĪSAv(config)# access-list ICMP permit icmp any any ASAv(config)# access-group ICMP globalĨ4 bytes from 172.16.32.2 icmp_seq=1 ttl=255 time=23.759 ms ^C VPCS>ĪSAv(config)# show xlate 1 in use, 11 most used Flags: D - DNS, e - extended, I - identity, i - dynamic, r - portmap, s - static, T - twice, N - net-to-net NAT from outside:0.0.0.0/0 to inside:0.0.0.0/0 flags sIT idle 0:00:53 timeout 0:00:00ĪSAv(config)# show xlate 2 in use, 11 most used Flags: D - DNS, e - extended, I - identity, i - dynamic, r - portmap, s - static, T - twice, N - net-to-net NAT from outside:0.0.0.0/0 to inside:0.0.0.0/0 flags sIT idle 0:00:00 timeout 0:00:00 In this tutorial we will configure Access Control Lists (ACL) on a Cisco ASA firewall. example config: sla monitor 1 type echo protocol ipIcmpEcho 8.8.8.8 interface outside num-packets 10 timeout 1000 frequency 5 sla monitor schedule 1 life forever start-time now route outside 0.0.0.0 0.0.0.0 .10 1 track 10 route inside 0.0.0.0 0.0.0.0 192.168.10.2 254 track 10 rtr 1 reachability.

Cisco asa 5505 configuration example