ASA5505: Intelligently set the default route to ISP’s gateway.

ASA5505: Intelligently set the default route to ISP’s gateway.

by Cyrus Lok on Saturday, April 10, 2010 at 4:25am

Wow… this ASA5505 has a command that conveniently set the default route to my ISP’s gateway.

ciscoasa(config)# int vlan 2
ciscoasa(config-if)# ip add
ciscoasa(config-if)# ip address dhcp ?

interface mode commands/options:
setroute Keyword to set the default route using the default gateway
parameter the DHCP server returns
<cr>
ciscoasa(config-if)# ip address dhcp setroute ?

ciscoasa(config)# sh route

Gateway of last resort is 116.88.114.1 to network 0.0.0.0

C 116.88.114.0 255.255.254.0 is directly connected, outside
C 192.168.1.0 255.255.255.0 is directly connected, inside
d* 0.0.0.0 0.0.0.0 [1/0] via 116.88.114.1, outside

ciscoasa(config)# ping 116.88.114.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 116.88.114.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/10/20 ms

Translated the any inside source addresses to the public ip address, and the translation was done on the outside interface.

ciscoasa(config)# sh run nat
nat (inside) 1 0.0.0.0 0.0.0.0 dns
ciscoasa(config)# sh run global
global (outside) 1 interface

I can even ping to google…so is that supposed to mean I can surf the net behind the firewall box?
ciscoasa(config)# ping 74.125.71.147
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 74.125.71.147, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 40/46/50 ms

Advertisements
This entry was posted in Security. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s