Cisco and Windows XP Help

I kind of hate you Cisco.

I have a firewall. It’s good practice to set that device to have a static IP. If you do this using the ASDM, systems behind the firewall will suddenly not be able to connect to the internet. At all. This is because you don’t have a route to the outside world. Follow the steps below to go from DHCP on your 5505 to a static IP.

1. Open the ASDM and log into your device.
2. Under Configuration, Interfaces, select the Outside interface and hit Edit
3. In the ‘IP Address’ box, click the radio for ‘Use Static IP’
4. Select an IP address, and use ‘255.255.255.0′ for the mask.
5. Hit ok, then apply. Your boxes probably lose their connection right about now.
6. Click ‘Routing’ on the left, Make sure ‘Static Routes’ is selected.
7. This box is probably empty. Click ‘Add’.
8. For the interface name, select ‘Outside’ (or whatever the outside interface is named)
9. In the IP Address field, type: ‘0.0.0.0′
10. In the Mask field, type: ‘0.0.0.0′
11. In the Gateway IP field, type the gateway outside of your asa5505. Like, whatever it’s gateway is. If you have a box on the same subnet as the cisco box, do an ipconfig /all and use the gateway listed there.
12. Metric should be ‘1′
13. Hit ok, then apply. Now your boxes can get out from behind the firewall, but we need to give them DNS servers and such, if you are using DHCP to assign IP’s to boxes behind the firewall.
14. Click ‘Properties’ on the left.
15. Click ‘DHCP Services’
16. Click ‘DHCP Server’
17. Select interface inside, and hit edit. Enter your DNS Servers and WINS Server
18. Hit OK, Apply
19. Now to save and reload the box, click ‘Tools/System reload’
20. Select ‘Save the running configuration at time of reload’
21. Click ‘Schedule Relod’

The Cisco asa5505 will take a couple minutes to reset, but when it comes up the device should have a static ip, and boxes behind the firewall will get IP’s from DHCP, and they should be able to get out from behind the firewall!

Trackback URI | Comments RSS