Questions tagged [cisco-asa]

Cisco's Adaptive Security Appliance (ASA) which combines functionality from the PIX, VPN 3000 series and Intrusion Prevention Systems (IPS) product lines

12
votes
1answer
2k views

ASA5505 and IPv6 over a PPPoE Link

I see a lot of conflicting information about whether or not a Cisco ASA (5505 in this case) can use IPv6 over a PPPoE connection. I see official Cisco documentation making it look easy, but I see ...
5
votes
3answers
2k views

Unable to connect via VPN to remote network

PROBLEM: I'm unable to connect via VPN to our production network while connected to my home wireless network. SETUP: Internet | ISP router at home | Cisco ASA 5505 firewall | Buffalo wireless ...
5
votes
1answer
1k views

How many contexts can be created on a Cisco ASA Active/Standby Pair?

How many contexts can be created on a Cisco ASA Active/Standby pair with base license?
8
votes
4answers
11k views

ASA use of proxy ARP for NAT

I will be performing NAT on the outside interface of an ASA to a web server within a DMZ. I would like to disable proxy-arp on all the interfaces that I can. I know that outside interface will need to ...
11
votes
3answers
1k views

Two Cisco ASA 5525-X as Internet Gateways without Layer 2

Add another reason to hate NAT to the list. I'm bringing up two Internet egress points in our corporate network. The edge devices will be ASA 5525-X firewalls. Traditionally you would put these into ...
13
votes
7answers
3k views

How can I generate traffic on a Cisco ASA?

In a lot of locations, we have only one Cisco ASA 5505 each and one or more WiFi APs, besides the provider router. No servers or PCs, just WiFi service for occasional visitors. I want to remotely ...
21
votes
5answers
27k views

Cisco ASA site-to-site VPN failover

We recently replaced international MPLS with new ASA 5510s and site-to-site VPNs. However, when we deployed this we ran into a problem where each remote location has 2 ISPs for redundancy, but when ...
19
votes
2answers
2k views

How do you get an ASA to announce NAT'd 'outside' addresses in to an OSPF zone?

Device arrangement is as follows: BGP Peers + | | +------+-------+ | | | Juniper MX5 | | | +------+-------+ |.254 OSPF | 10.0.1.0/24 ...
12
votes
3answers
1k views

Migrating pre-8.3 ASA config to 8.3+

What are best practices migrating ASA config to 8.3 and forward? I have manually created a new config file with the following changes: new network objects new NAT statements new access-lists ...