TopologyRequirement: You can use the Cisco Firewall ASA to access servers in the Internet and DMZ through the Intranet. servers in DMZ can be published to the network for access by Internet users.I. Use of Cisco simulated FirewallBecause we do not have real devices, we use a virtual system using the Linux kernel to simulate Cisco's firewall. The simulated firewal
Cisco Firewall ASA Configuration case
Topology map
Requirements: Through Cisco Firewall ASA use intranet users can access the external network and the server in the DMZ, the server in the DMZ can be published to the network, for the extranet user access
A The use of Cisco
Cisco ASA L2TP over IPSEC configuration details
1. Create a VPN address pool
Ciscoasa (config) # ip local pool vpnpool 192.168.151.11-192.168.151.15 mask 255.255.255.0
2. Configure the Ipsec encryption algorithms 3DES and SHA.
Ciscoasa (config) # crypto ipsec transform-set TRANS_ESP_3DES_SHA esp-3des (esp-sha-hmac)
3. Set the IPSec transmission mode to transport. The default mode is tunnel (L2TP only suppor
Company A Cisco asa5505 collapsed, fortunately there is a standby machine, but before the other people have used, do not know the login password, so take out the console line access to the standby 5505, re-power, press ESC at startup, then the prompt Rommon #0 >The value of the configuration register is 0x41 Rommon #0 >confreg 0x41Enter reboot, restart the device Rommon #1 >rebootThe process of entering a password is skipped after restarting the devic
Step 1 of Cisco ASA firewall VPN configuration: Create an address pool. To remotely access the client, you need to assign an IP address during logon. Therefore, we also need to create a DHCP address pool for these clients. However, if you have a DHCP server, you can also use a DHCP server. QUANMA-T (config) # ip local pool vpnpool 192.168.10.100-192.168.10.199 mask 255.255.255.0 Step 2: Create IKE Phase 1.
1, the experimental topology diagram :650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/59/49/wKioL1TPCfbgwIOLAACCEDU0i5M014.jpg "title=" Untitled. jpg "alt=" wkiol1tpcfbgwiolaaccedu0i5m014.jpg "/>1. Experiment Description :R1 as a company's site 1, the internal 1.1.1.1/32 Server needs a company site 2 of the administrator to implement remote telnet of equipment management;R5 as a company's site 2, the internal 2.2.2.2/32 Server needs a company site 1 of the administrator to implemen
In actual cases also encountered this kind of problem, the customer intranet has a server map on the Internet, extranet user access Global-ip no problem, but intranet users want to access Global-ip will not pass, typical is the user will intranet server made public network DNS a record, Both internal and external networks are accessed through domain names.JUNIPER series equipment including NETSCREEN/ISG/SSG no such problems, directly through the ordinary dip can be achieved, the subsequent produ
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.