Basic Configurations steps:
1- Set the firewall mode
2- Assign a Global ip address (for management access)
3- Assign interface names(inside and outside)
4- Enable http server
5- Identify ip range allowed to use by ASDP
6- Enable DHCP server
7- Web cache configuration (WCC)
8- Troubleshoot(factory default)
Connect the device with serial link in consol and PC in com port
Use Putty or Hyper terminal to access the device
· I prefer Putty
After connection this screen will appear in Putty
hostname > en
hostname >usr name
hostname >password
hostname # config t
1- hostname (config)#firewall transparent * change firewall’s mode
hostname (config)#show firewall
· Result: Transparent
2- hostname (config)#ip 192.168.0.250 * Global ip address
3- hostname (config)#int vlan 1 * create vlan 1 for inside interfaces
hostname (config)#nameif inside
hostname (config)#int vlan 2 * create vlan 2 for outside interface
hostname (config)#nameif outside
hostname (config)#int e0/0 * create Ethernet interface for outside vlan 2
hostname (config)#switchport access vlan 2
hostname (config)#no shut
hostname (config)#int e0/1 * create Ethernet interfaces for inside vlan 1
hostname (config)#switchport access vlan 1
hostname (config)#no shut
hostname (config)#int e0/2
hostname (config)#switchport access vlan 1
hostname (config)#no shut
hostname (config)#int e0/3
hostname (config)#switchport access vlan 1
hostname (config)#no shut
hostname (config)#int e0/4
hostname (config)#switchport access vlan 1
hostname (config)#no shut
#no DMZ and PoE in this configuration
· Note transparent firewall dosen’t support PoE devices.
see user guide on page using transparent firewall in your network
4- cisco asa(config)#http server enable * enable https server
5- cisco asa(config)#http 192.168.0.0 255.255.255.0 inside *ASDM subnet and interface
6- hostname(config)# dhcpd address 192.168.0.100 192.168.0.200 * dhcp ip range
hostname(config)# dhcpd dns 192.168.0.1 * dns
hostname(config)# dhcpd wins 192.168.0.251 * win server
hostname(config)# dhcpd lease 1440 * ip lease time
hostname(config)# dhcpd enable inside * dhcp listening interface
* transparent mode config default gateway
hostname(config)# dhcpd option 3 ip 192.168.0.1
* web cache configuration
For example, to enable the standard web-cache service and redirect HTTP traffic that enters the inside interface
7- hostname(config)# wccp web-cache
hostname(config)# wccp interface inside web-cache redirect in
* page no 266 using transparent firewall in your network
*Adding an EtherType Access List page 331
* troubleshooting
you can't restore factory default setting in transparent firewall mode
you've to change firewall mode to routed
hostname(config)# no firewall transparent
hostname(config)#configure factory-default [ip_address [mask]]
or
hostname(config)#configure factory-default
hostname(config)#show running-config * show all firewall running configurations
hostname(config)#write memory *write the configuration to memory
hostname(config)#reload * restart the device
