## TITLE: CISCO ASA 5505 HELP
## OS:    CISCO
## LAST DOC MODIFY: 2011-11-18


##  INITIAL  ##################################

Hyperterminal
	Bits per second: 9600
	Data bits: 8
	Parity: None
	Stop bits: 1
	Flow control: None

Press enter a couple times to get prompt like: ciscoasa>
	ena
	config t
	config factory-default 10.0.4.1 255.255.255.0
	when <---more---> spacebar to pass all info
	reload save-config noconfirm


##  GATEWAY  ##################################

Device Setup > Routing > Static Routes
	Add route:
		outside
		IP Address 0.0.0.0
		Netmask 0.0.0.0
		Gateway IP 123.456.789.1


##  SSL VPN Wiz  ##################################

Cisco SSL VPN Client AnyConnect
Profile Name:	myprofile
Auth via Local Database
Modify existing policy
IPv4 pool:	used one created above
Allow user to select connection profile, identified by its alias on the login page

##  CISCO ASA 5505 HELPFUL COMMANDS  ##


#
ena
config t
crypto isakmp nat-t 21
write
reload
y


# ENABLE SSH ON OUTSIDE
> ssh 0 0 outside


# DISABLE SSH ON OUTSIDE
> no ssh 0 0 outside


# QUICK ADD USER
> enable
> config t
> username cisco password cisco
> aaa authentication ssh console LOCAL


#  OPEN PORT (in asdm 'command line interface')
> access-list outside_access_in extended permit tcp any interface outside eq 80
> static (inside,outside) tcp interface 80 10.0.4.5 80 netmask 255.255.255.255
> access-group outside_access_in in interface outside
> write memory


> access-list outside_access_in extended permit tcp any interface outside eq 443
> static (inside,outside) tcp interface 443 10.0.1.200 443 netmask 255.255.255.255
> access-group outside_access_in in interface outside
> write memory


#  CHOOSE IMAGE IN FLASH TO BOOT FROM
> enable
> config t
> boot system disk0:/asa822-k8.bin
> asdm image disk0:/asdm-625.bin
> write mem
> reload


#  RECOMMENDED VERSION MATCHING
ASA 7.2		Recommended: 5.2(4)
ASA 8.0(2)	Recommended: 6.2(3)
ASA 8.0(4)	Recommended: 6.2(3)
ASA 8.0(5)	ASDM 6.2(3)
ASA 8.2(1)	Recommended: 6.2(3)

__________________________________________________________________________________________
Copyright 2000-2011 Dylan Schneider. All Rights Reserved.
This document uses unix line breaks(LF).
Text on macnode.com is for example only, not as actual working instructions.
Text on macnode.com should only be used as a guide, and only by advanced it professionals.