Hi my name is she had from teach ethics.
Welcome you all to Cisco fire total cause in this video we will cover the topic of configuring the basic
firewall.
Cisco is a we will configure the interfaces of the inside and outside for the AC appliance by the end
of this view.
You will be able to understand how to apply the basic settings on the inside and outside interfaces
of the Cisco firewall appliance.
So let us start here is our actually figure and slides.
It's only one to slide which I included actually a snapshot of the lab that we will do.
We will do our lab using Cisco Packet Tracer.
And here is the configuration that you need all IP addresses for all those devices are mentioned here.
So you don't have to worry when you try the lab you will have all information available to you.
OK.
So let's start Cisco Packet Tracer.
OK.
So he does Packet Tracer the devices that we need.
One is a appliance fifty five or six one drought of
one switch which is the 20 960 and also APC connected to the switch lift that now connect those devices
together go to the connection step it is that straight table from the network interface card of the
P.C. to the first fast ethernet port.
Then again from the second interface port to the first gigabit ethernet port on the firewall here from
the router to the firewall we will use a cross over cable which is that dotted one why because they
are considered both as routers Slayer 3 you use cross over cable with alike devices like two routers
two pieces.
So we will use here that cross over cable to the Gigabit Ethernet 0 over 0.
OK.
Here is our inside network.
Let's put a note here inside
and here is our outside which is the network after the final.
You can move it right or left as you want the local network here subnet is 1 9 2 1 6 8 1 0 0 with subnet
Moscow's 24
you see when I come on the Cisco firewall already the inside interface is configured with IP address
1 9 2 1 6 8 1 2 1 it's a default configuration coming with you as a firewall so we don't have to do
anything on this one it's already up and has an IP address of one that one
this b.s. We will give it one dot ten so let's put here the 10 on here both won just as an indicator.
So changed the zero here to ten will become this IP address.
Change it to one would become the IP address of this interface.
Let's go to the P.C. and put this IP address.
Go to the configuration tab
go too fast ethernet 0 which is the network interface cards.
Here you go.
1 9 2 the 1 6 8 1 to 10 the subnet mask is typed by default which is the 24.
And also we will need to put a gateway here the gateway for this P.C. will be this interface ip address
because it is the door or the gateway for this local P.C. to go to the outside network.
So we will type here 1 9 2 1 6 8 to 1 the 1 That's it that's all we need so let's type here.
The Gateway will be you will see this on on the finger on the slide.
Gateway 1 9 2 1 6 8 1 2 1 let's now configure the outside interface of the firewall.
Click on the firewall.
Go to the command line interface Seelye.
Let's go first to that privilege mode.
We have first to type enable or just e and press tab.
It will prompt you for a password by default.
That is not possible to just press enter okay.
You're just inside that privilege mode.
Privilege mode.
Now we need to configure the firewall type configure terminal or just con Sig and press tab to press
tab.
It's automatically written by the firewall.
Enter.
Now what do we need to do.
We need to configure this interface which is gigabit interface.
Just come on this interface.
It's 1 over to yet one over two Gigabit Ethernet one over to so type interface or just I.A.
gigabit just type g i press tab it completes automatically and then one over to 1 slash to.
Okay.
We are inside the interface configuration now.
Now we need to give it an IP address.
We will use this IP address the network here.
The outside will have this public IP address.
I have chosen those IP addresses 2 0 9 2 2 1 6 5 200 2 2 4 with a subject mask or 30 subnet Moscow 30
gives you only 2 available hosts 2 2 5 and 2 2 6.
So this one for the router will be that 2 to 5 and for the firewall let's choose the 2 6 OK.
So let's configure this on the firewall now
IP address 2 0 9 1 6 5 200.
The 2 to 6.
We have to type the subnet mask which is 2 5 5 2 5 5 2 5 5 the 30 subnet mask comes to 252 to 5 to
there is just 1 5 extra here so 2 5 5 2 5 5 2 5 5 2 5 2 press enter.
Now we need to name it as an outside interface.
As we mentioned in an earlier video.
So we type name interface or name if we just type outside
OK.
Now we need to turn this interface up because it's down by default.
We just type no shutdown no shut tab.
It completes the command automatically and also we can give it a description if you want just type D
s tap and the description will be connection
to Internet
which is actually we consider this router as the Internet.
I'm just type.
Enter controls it to go out and then save your configuration copy running configuration to the startup
configuration it will prompt you just press enter configuration saved that's it.
So now let's check our configuration we type show IP address.
Here you go the inside has one the one it's up the outside interface the one we just configured it is
the IP address it's up.
So on is good.
Now we need this red color to turn into green in order to be connected.
It will not turn into green until we configure the other side.
Also you can type show running configuration if you want it will show you on the configuration on the
firewall.
Here you go.
Same information here shows so both commands you can use.
By the way this structure actually can change the icon of it and instead of a router icon if you want
to change it to look like for example an Internet cloud like this is just a photo you can change it
you can just type customize icon and you could view browse choose any icon you want from your computer
and just change it by the end.
It's just a router but it looks like a cloud just for the purpose of the lab.
All right let's now configured the IP address for the relative there is one called actually feature
here.
You can just configure the IP addresses in a graphical view.
You don't have to go to the seal I just as an easy way you can just go to the configuration tab here.
Which interface and is this.
See is giga Internet 0 over 0 Yeah.
So here's giga 0 0 instead of no shut down just click on goes up.
Here put your IP address which is 2 0 9 1 6 5 to 100 that 2 to 5.
The subnet mask is ending 2 5 2 That's it.
And now if you want to see the configuration instead of typing copy running configuration startup configuration
go to settings and just click save.
Also you can change the name of this router.
You can change it to as shows in the slide.
I call it ISP outage.
It's just the name and here also ISP router
click save.
That's it.
You see the connection turned green
All right.
So now we have connectivity between the inside and the outside.
Now let's try to ping from this P.C. to the inside interface.
Click on the P.C. go to the desktop tab.
You will see the command prompt just like pink 1 9 2 2 1 6 8 2 1 1 1.
It's replies so it's connected.
If you want to ping from this P.C. to the outside it will fail.
Why.
Because actually here is a private IP address.
And here is a public IP address and in order to ping from the inside to the public IP address you will
need to use net network address translation which we will cover in future lab video.
All right.
As I said all configuration IP address are here mentioned the same way you verify the concentration
on the router.
Also show running configuration or also you can write
type show IP interface brief which is the art.
Here you go.
It shows you what you have here.
Show IP interface brief okay so now we configured the inside and outside interface on the firewall and
also on the router.
That's all for today's video.
On the next video we will discuss what we call a security context for the ACA.
I hope you enjoy the video.
Thank you very much for watching.