Help with Configuring ASA 5505 Please?

[cal060307]

Hi all

I am very newbie for this Firewall and have never done any Cisco security course so please help me.

Currently we have a Pix 501 that works well, now we upgrade to ASA 5505, and I have been trying to allow user to get internet connection for a week now but no go at all.
Any help would be much appreciated.

Here is our network:

Internet -> DSL Negear Modem -> ASA 5505 -> Gigabit switch -> inside network

And here is "show run" :

ciscoasa(config)# show run
: Saved
:
ASA Version 7.2(2)
!
hostname ciscoasa
domain-name cisco.com
enable password 19fcQSlH0UzRf5Rf encrypted
names
!
interface Vlan1
nameif inside
security-level 100
ip address 192.168.0.154 255.255.255.0
!
interface Vlan2
nameif outside
security-level 0
pppoe client vpdn group pppoe_group
ip address pppoe setroute
!
interface Vlan3
no forward interface Vlan1
nameif dmz
security-level 50
no ip address
!
interface Ethernet0/0
switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
!
interface Ethernet0/3
!
interface Ethernet0/4
!
interface Ethernet0/5
!
interface Ethernet0/6
!
interface Ethernet0/7
!
passwd 2KFQnbNIdI.2KYOU encrypted
ftp mode passive
dns server-group DefaultDNS
domain-name cisco.com


pager lines 24
logging asdm informational
mtu inside 1500
mtu outside 1500
mtu dmz 1500
ip verify reverse-path interface outside
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-522.bin
no asdm history enable
arp timeout 14400
global (outside) 101 interface
nat (inside) 101 0.0.0.0 0.0.0.0

**** inside IP schema: 192.168.0.0 255.255.255.0


route outside 61.9.x.x 255.255.255.255 61.9.a.b 1
route outside 61.9.x.x 255.255.255.255 61.9.a.b 1
route outside 144.140.x.x 255.255.255.255 61.9.a.b 1
route outside 144.140.x.x 255.255.255.255 61.9.a.b 1

**** 61.9.a.b is static IP provided by ISP

timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
http server enable
http 192.168.0.0 255.255.255.0 inside

no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
telnet timeout 5
ssh timeout 5
console timeout 0



vpdn group pppoe_group request dialout pppoe
vpdn group pppoe_group localname vb39033@isp.com.au
vpdn group pppoe_group ppp authentication chap
vpdn username vb39033@isp.com.au password *********
dhcpd ping_timeout 750

!

!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
!
service-policy global_policy global
prompt hostname context
Cryptochecksum:f3b1c25055d9c90dfc851f51a19a78e8
: end

 

[NetworkGhost]

Do you have a outside IP assigned? "sh int ip br"

Free Firewall/Network/Systems Support-

http://firewalls.ath.cx

 

[Supergrrover]

Are you actually using VLANs? If not you should simplify your config to not use them. If you do need them - try these links
Here's an explanation of the VLANs on 5505

http://www.cisco.com/en/US/products...ng_started_guide_chapter09186a0080856c68.html

http://www.cisco.com/en/US/products..._guide_chapter09186a0080636f42.html#wp1044006

http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a0080636f70.html

http://www.cisco.com/univercd/cc/td/doc/product/netsec/secmgmt/asdm/v_5_2/user/ifcs5505.htm

Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[cal060307]

Thank you 2 very much for replies.

I got outside ip assigned by PPPoE

I would like to get rid of VLAN, Can you please show me how.

Since they are already there by default, I did tried to disable VLAN from ASDM but I got error message.

Again thank you so much

 

[NetworkGhost]

try this:

conf t
interface Ethernet0/1 (Hopefully this is your inside interface)
switchport access vlan 1
exit
wr mem

Post a copy of this:

sh int ip br

Free Firewall/Network/Systems Support-

http://firewalls.ath.cx

 

[cal060307]

Hi all

Firstly I thank all of you for your great help.
I got this problem sorted out. All I did was that I issued "conf factory-default" to restart everything again and step by step I configured the PPPoE client, that way I could check which step I did wrong or right.
And now the next project is VPN, I am really looking forward to it.

Again much appreciated.

Cheers