ASA Notes

Let internet inbound to webserver

ASA(config)# object network web-host

ASA(config-network-object)# host 192.168.1.4

Nat to outside interface

ASA(config-network-object)# nat (inside,outside) static interface service tcp 443 9443

ASA(config-network-object)# exit

Create access list

ASA(config)# access-list outside_access_in permit tcp any 192.168.1.4 eq https

Apply access list to interface

ASA(config)# access-group outside_access_in in interface outside

ASA(config)#

ASA(config)# wr mem

-------------------------------------------------------------------------------------------------------------------------------------------------

Send logs to a syslog server

logging enable

logging timestamp

logging trap informational

logging asdm informational

logging device-id hostname

logging host inside 192.168.1.31

-------------------------------------------------------------------------------------------------------------------------------------------------

Password Recovery

Reboot

Press esc

Rommon #0>confreg 0x41

Rommon #0>boot

ciscoasa>enable

ciscoasa#copy running-config startup-config

ciscoasa#config t

ciscoasa(config)#enable password MyEnablePassword

ciscoasa(config)no aaa authentication enable console LOCAL

ciscoasa(config)no aaa authentication serial console LOCAL

ciscoasa(config)no aaa authentication ssh console LOCAL

ciscoasa(config)no aaa authorization LOCAL

ciscoasa(config#)config-register 0x01

ciscoasa(config#exit

ciscoasa#copy run start

ciscoasa#reload