Router3(config-if)#ip address 101.1.1.1 255.255.255.0Д¬onfiguring IP address, name and security level on the interface of ASA. In this task, we will enable static NAT for the traffic generating from INSIDE to OUTSIDE and for the traffic going from DMZ to OUTSIDE.Д¬onfiguring IP addresses on all routers and ASA. Three routers namely Router1 (IP address вЂ“ 10.1.1.1/24), Router2 (IP address вЂ“ 11.1.1.1/24) and Router3 (IP address вЂ“ 101.1.1.1) are connected to ASA (IP address- 10.1.1.2/24, name вЂ“ INSIDE and security level вЂ“ 100 on Gi0/0, IP address вЂ“ 11.1.1.2/24, name вЂ“ DMZ and security level вЂ“ 50 on Gi0/1, IP address вЂ“ 101.1.1.2/24, name-OUTSIDE and security level вЂ“ 0 on Gi0/2) as shown in the above figure. The access-list has been made to allow ICMP the traffic from OUTSIDE to DMZ or INSIDE because by default, the ICMP traffic is not allowed from lower security level to higher security level in ASA (Adaptive Security Appliance). This step will specify the direction in which NAT should take place and in what IP address the private IP address should be translated, e.g., NAT (DMZ, OUTSIDE) static 111.1.1.1 This states that the static NAT operation will take place when the traffic is going from DMZ to OUTSIDE and will translate the IP address (specified in network object command) to 111.1.1.1 This will state the host on which NAT will be applied. The access-group command will be used to state the direction (out or in) in which the action (specified above) should be taken place.

Step-2: Apply the access-list to an interface вЂ“.

Network Devices (Hub, Repeater, Bridge, Switch, Router, Gateways and Brouter)Д«uild the access-list stating the permit condition i.e who should be permit and what protocol should be permit.

Hot Standby Router Protocol (HSRP) and Virtual Router Redundancy Protocol (VRRP).Difference between File Transfer Protocol (FTP) and Secure File Transfer Protocol (SFTP).TELNET and SSH on Adaptive Security Appliance (ASA).Port Address Translation (PAT) on Adaptive Security Appliance (ASA).Port Address Translation (PAT) mapping to Private IPs.Difference Between Network Address Translation (NAT) and Port Address Translation (PAT).Types of Network Address Translation (NAT).Introduction of Virtual Router Redundancy Protocol (VRRP) and its configuration.ISRO CS Syllabus for Scientist/Engineer Exam.ISRO CS Original Papers and Official Keys.GATE CS Original Papers and Official Keys.

Cisco asa 5505 configuration example