The above steps are the absolutely necessary steps you need to configure for making the appliance operational. The PAT configuration below is for ASA 8.3 and later: NAT (static and dynamic) and PAT are configured under network objects. The “global” command is no longer supported. This version introduced several important configuration changes, especially on the NAT/PAT mechanism. Step 5: Configure PAT on the outside interfaceĪSA5505(config)# global (outside) 1 interfaceĪSA5505(config)# nat (inside) 1 0.0.0.0 0.0.0.0įrom March 2010, Cisco announced the new Cisco ASA software version 8.3. Step 4: Enable the rest interfaces with no shut Step 2: Configure the external interface vlan (connected to Internet)ĪSA5505(config-if)# ip address 200.200.200.1 255.255.255.0ĪSA5505(config-if)# switchport access vlan 2 Notice from the diagram that port Ethernet0/0 connects to the Internet, and ports Ethernet0/1 to 7 connect to internal hosts (PC computers etc).

The diagram below illustrates the network topology for the configuration setup that we will describe.

Let’s see the basic configuration setup of the most important steps that you need to configure. By default, interface Ethernet0/0 is assigned to VLAN 2 and its the outside interface (the one which connects to the Internet), and the other 7 interfaces (Ethernet0/1 to 0/7) are assigned by default to VLAN 1 and are used for connecting to the internal network. That is, you cannot configure the physical ports as Layer 3 ports, rather you have to create interface Vlans and assign the Layer 2 interfaces in each VLAN. The difference of the 5505 model from the bigger ASA models is that it has an 8-port 10/100 switch which acts as Layer 2 only. Moreover, the performance of the Cisco ASA 5505 appliance supports 150Mbps firewall throughput and 4000 firewall connections per second, which is more than enough for small networks. The Adaptive Security technology of the ASA firewalls offers solid and reliable firewall protection, advanced application aware security, denial of service attack protection and much more. Although this model is suitable for small businesses, branch offices or even home use, its firewall security capabilities are the same as the biggest models (5510, 5520, 5540 etc).

The Cisco ASA 5505 Firewall is the smallest model in the new 5500 Cisco series of hardware appliances.

Cisco asa 5505 throughput