[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-387534-105":59,"doc-detail-387534-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","lab-configuring-asa-5505-basic-settings-and-firewall-using-cli","Lab-Configuring ASA 5505 Basic Settings and Firewall Using CLI","","CCNA Security lab using an ASA 5505 to build a stateful firewall that protects an internal corporate network while permitting inside hosts to reach the Internet. The scenario defines Outside, Inside, and DMZ security zones and uses Layer 3 VLAN interfaces for access. The lab guides configuration via the ASA CLI, including basic router/switch/PC setup, ASA console access, interface security levels, routing, PAT and inspection policy, DHCP and AAA, SSH/ASDM access, and DMZ deployment with static NAT and ACL-based verification.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":20,"@type":76,"position":81},"https://docshare.wps.com/document/exam/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/lab-configuring-asa-5505-basic-settings-and-firewall-using-cli/387534/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/lab-configuring-asa-5505-basic-settings-and-firewall-using-cli/387534.png","ImageObject",300,407,{"name":92,"@type":93},"Ben ","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-11-08","2026-09-24",true,{"@type":102,"interactionType":103,"userInteractionCount":52},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"What are the main security interfaces and traffic expectations in this ASA lab scenario?","Question",{"text":112,"@type":113},"The ASA creates three security interfaces: Outside, Inside, and DMZ. Outside users get limited access to the DMZ and no access to inside resources, while Inside users can access the DMZ and Outside resources.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"Which tasks are covered for the ASA using CLI setup mode?",{"text":117,"@type":113},"The lab includes accessing the ASA console to view hardware, software, and configuration details, checking the ASA version, interfaces, and license, examining flash contents, and using CLI Setup mode for basic settings such as hostname, passwords, and clock.",{"name":119,"@type":110,"acceptedAnswer":120},"What components are configured in Part 6 to provide DMZ access?",{"text":121,"@type":113},"Part 6 configures the DMZ interface VLAN 3, sets up static NAT for the DMZ server using a network object, creates an ACL to allow DMZ access for Internet users, and verifies access for external and internal users.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},387534,1790517703,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":19,"category_name":20,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":52,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":139,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":144,"read_time":145,"preview_page_count":4},2336478951081,"https://ap-avatar.wpscdn.com/davatar_276721f389ce27ea32af1340a28f341c","CCNA Security  \nLab-Configuring ASA 5505 Basic Settings and Firewall Using CLI  \nTopology  \nNote: ISR G2 devices use GigabitEthernet interfaces instead of FastEthernet interfaces.  \nIP Addressing Table  \n\n| Device | Interface | IP Address | Subnet Mask | Default Gateway | Switch Port |\n| --- | --- | --- | --- | --- | --- |\n| R1 | G0/0 | [209.165.200.225](209.165.200.225) | [255.255.255.248](255.255.255.248) | N/A | ASA E0/0 |\n|  | S0/0/0 (DCE) | [10.1.1.1](10.1.1.1) | [255.255.255.252](255.255.255.252) | N/A | N/A |\n| R2 | S0/0/0 | [10.1.1.2](10.1.1.2) | [255.255.255.252](255.255.255.252) | N/A | N/A |\n|  | S0/0/1 (DCE) | [10.2.2.2](10.2.2.2) | [255.255.255.252](255.255.255.252) | N/A | N/A |\n| R3 | G0/1 | [172.16.3.1](172.16.3.1) | [255.255.255.0](255.255.255.0) | N/A | S3 F0/5 |\n|  | S0/0/1 | [10.2.2.1](10.2.2.1) | [255.255.255.252](255.255.255.252) | N/A | N/A |\n| ASA | VLAN 1 (E0/1) | [192.168.1.1](192.168.1.1) | [255.255.255.0](255.255.255.0) | NA | S2 F0/24 |\n| ASA | VLAN 2 (E0/0) | [209.165.200.226](209.165.200.226) | [255.255.255.248](255.255.255.248) | NA | R1 G0/0 |\n| ASA | VLAN 3 (E0/2) | [192.168.2.1](192.168.2.1) | [255.255.255.0](255.255.255.0) | NA | S1 F0/24 |\n| PC-A | NIC | [192.168.2.3](192.168.2.3) | [255.255.255.0](255.255.255.0) | [192.168.2.1](192.168.2.1) | S1 F0/6 |\n| PC-B | NIC | [192.168.1.3](192.168.1.3) | [255.255.255.0](255.255.255.0) | [192.168.1.1](192.168.1.1) | S2 F0/18 |\n| PC-C | NIC | [172.16.3.3](172.16.3.3) | [255.255.255.0](255.255.255.0) | [172.16.3.1](172.16.3.1) | S3 F0/18 |\n\nObjectives  \nPart 1: Basic Router/Switch/PC Configuration  \n􀁸 Cable the network as shown in the topology.  \n􀁸 Configure hostnames and interface IP addresses for routers, switches, and PCs.  \n􀁸 Configure static routing, including default routes, between R1, R2, and R3 .  \n􀁸 Enable [HTTP](HTTP) and SSH access for R1 .  \n􀁸 Configure PC host IP settings.  \n􀁸 Verify connectivity between hosts, switches , and routers.  \n􀁸 Save the basic running configuration for each router and switch.  \nPart 2: Accessing the ASA Console and Using CLI Setup Mode to Configure Basic Settings  \n􀁸 Access the ASA console and view hardware, software, and configuration settings.  \n􀁸 Determine the ASA version, interfaces, and license.  \n􀁸 Determine the file system and contents of flash memory.  \n􀁸 Use CLI Setup mode to configure basic settings (hostname, passwords, clock, etc. ) .  \nPart 3: Configuring Basic ASA Settings and Interface Security Levels Using the CLI.  \n􀁸 Configure the hostname and domain name.  \n􀁸 Configure the login and enable passwords.  \n􀁸 Set the date and time.  \n􀁸 Configure the inside and outside interfaces.  \n􀁸 Test connectivity to the ASA.  \n􀁸 Configure SSH access to the ASA.  \n􀁸 Configure [HTTPS](HTTPS) access on the ASA for ASDM.  \nPart 4: Configuring Routing, Address Translation, and Inspection Policy Using the CLI  \n􀁸 Configure a static default route for the ASA.  \n􀁸 Configure PAT and network objects.  \n􀁸 Modify the MPF application inspection global service policy.  \nPart 5: Configuring DHCP, AAA, and SSH  \n􀁸 Configure the ASA as a DHCP server/client.  \n􀁸 Configure Local AAA user authentication.  \n􀁸 Configure SSH remote access to the AAA.  \nPart 6: Configuring DMZ, Static NAT, and ACLs  \n􀁸 Configure the DMZ interface VLAN 3 on the ASA.  \n􀁸 Configure static NAT for the DMZ server using a network object.  \n􀁸 Configure an ACL to allow access to the DMZ for Internet users.  \n􀁸 Verify access to the DMZ server for external and internal users.  \nBackground/Scenario  \nThe Cisco Adaptive Security Appliance (ASA) is an advanced network security device that integrates astateful firewall, VPN, and other capabilities. This lab employs an ASA 5505 to create a firewall and protect an internal corporate network from external intruders while allowing internal hosts access to the Internet. The ASA creates three security interfaces: Outside, Inside, and DMZ. It provides outside users limited access to the DMZ and no access to inside resou","cbCaiignl4ZPbkX5","https://ap.wps.com/l/cbCaiignl4ZPbkX5","pdf",576753,26,"English","# Objectives\n## Part 1: Basic Router/Switch/PC Configuration\n## Part 2: Accessing the ASA Console and Using CLI Setup Mode\n## Part 3: Configuring Basic ASA Settings and Interface Security Levels Using the CLI\n## Part 4: Configuring Routing, Address Translation, and Inspection Policy Using the CLI\n## Part 5: Configuring DHCP, AAA, and SSH\n## Part 6: Configuring DMZ, Static NAT, and ACLs\n# Background/Scenario","[{\"question\":\"What are the main security interfaces and traffic expectations in this ASA lab scenario?\",\"answer\":\"The ASA creates three security interfaces: Outside, Inside, and DMZ. Outside users get limited access to the DMZ and no access to inside resources, while Inside users can access the DMZ and Outside resources.\"},{\"question\":\"Which tasks are covered for the ASA using CLI setup mode?\",\"answer\":\"The lab includes accessing the ASA console to view hardware, software, and configuration details, checking the ASA version, interfaces, and license, examining flash contents, and using CLI Setup mode for basic settings such as hostname, passwords, and clock.\"},{\"question\":\"What components are configured in Part 6 to provide DMZ access?\",\"answer\":\"Part 6 configures the DMZ interface VLAN 3, sets up static NAT for the DMZ server using a network object, creates an ACL to allow DMZ access for Internet users, and verifies access for external and internal users.\"}]","Lab-Configuring ASA 5505 Basic Settings and Firewall Using CLI | PDF",1790286928,66]