Cisco 5505 asa configuration guide how to#
Cisco 5505 asa configuration guide software#

Repeat Steps 20–26 to create other network objects.In our example, we specify the netmask 255.255.255.0. In the Netmask text box, type the netmask.In our example, we specify the IP address 192.168.35.0. In the IP Address text box, type the IP address.From the IP Version check box, check IPv4.From the Type drop-down list, select Network.In our example, we specify the name wg-network. In the Name text box, type the object name.From the navigation menu, select Configuration > Firewall > Objects > Network Objects/Groups.From the Integrity Hash drop-down list, select sha-256.In our example, we specify the name AES256-SHA256. In the Name text box, type an object name.In the IKEv2 IPsec Proposals section, click Add.Select Configuration > Site-to-Site VPN > Advanced > IPsec Proposals (Transform Sets).Keep the default value for all other settings.From the Pseudo Random Function (PRF) Hash drop-down list, select sha256.From the Integrity Hash drop-down list, select sha256.From the Encryption drop-down list, select aes-256.From the D-H Group drop-down list, select 14.In the IKEv2 Policies section, click Add.Select Site-to-Site VPN > Advanced > IKE policies.Select the Enable traffic between two or more interfaces which are configured with same security levels check box.

Cisco 5505 asa configuration guide how to#

For information about how to configure interfaces, see the Cisco ASA 5506-X documentation. In our example, we configure a Cisco ASA 5506-X. Keep Phase 2 Settings as the default values.This the local network protected by the Cisco ASA. In the Network IP text box, type the remote IP segment.In the Remote IP section, from the Choose Type drop-down list, select Network IPv4.This the local network protected by the Firebox. In the Network IP text box, type the local IP segment.In the Local IP section, from the Choose Type drop-down list, select Network IPv4.From the Gateway drop-down list, select the gateway that you configured.Keep all other Phase 1 settings as the default values.From the Version drop-down list, select IKEv2.In the Gateway Endpoint section, select the Start Phase 1 tunnel when Firebox starts check box.In the adjacent text box, type the IP address of your Cisco ASA WAN connection.In the adjacent text box, type the IP address of your Cisco ASA WAN connection.

In the adjacent text box, type the primary IP address of the External Firebox interface.

The Primary Interface IP Address is the primary IP address you configured on the selected external interface.

From the Interface IP Address drop-down list, select Primary Interface IPv4 Address.

From the External Interface drop-down list, select External.

The Gateway Endpoint Settings dialog box opens.

In the Gateway Endpoint section, click Add.

In the adjacent text box, type the pre-shared key.

In the Credential Method section, select Use Pre-Shared Key.

From the Address Family drop-down list, select IPv4 Addresses.

In the Gateway Name text box, type a name to identify this Branch Office VPN gateway.

The Branch Office VPN configuration page opens. On the Firebox, configure a BOVPN connection: This diagram shows the topology for a BOVPN connection between a Firebox and a Cisco ASA.

Cisco 5505 asa configuration guide software#

The hardware and software used in this guide include: