network_stuff:cisco:asa
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| network_stuff:cisco:asa [2020/08/23 11:24] – jotasandoku | network_stuff:cisco:asa [2023/11/02 14:38] (current) – external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 86: | Line 86: | ||
| show conn all | show conn all | ||
| show access-list | show access-list | ||
| + | |||
| + | |||
| + | ---- | ||
| + | |||
| \\ | \\ | ||
| - | \\ | + | __**NAT**__\\ |
| - | __**NAT**__ | + | |
| - | Essential resource: NAT cheat sheet: See: [[http://packetpushers.net/cisco-nat-cheat-sheet]]/ | + | [[http://blog.packetsar.com/wp-content/ |
| + | |||
| + | {{ : | ||
| \\ | \\ | ||
| {{ : | {{ : | ||
| Line 168: | Line 174: | ||
| **Unified NAT** is used instead of NAT order meaning to down and more specific first order. | **Unified NAT** is used instead of NAT order meaning to down and more specific first order. | ||
| \\ | \\ | ||
| + | |||
| ---- | ---- | ||
| + | |||
| + | __INSERT ACCESS LIST IN POSITIONS__: | ||
| + | |||
| + | access-list outside-in line 1 extended permit tcp object-group mycompany1-networks object tanium-internal eq 17472 # Ao line x is what you’re looking for on where to put the new rule | ||
| + | show access list # blah it’ll show you the rule number order | ||
| + | | ||
| + | |||
| + | ---- | ||
| + | |||
| + | |||
| **Troubleshooting** | **Troubleshooting** | ||
| Line 181: | Line 198: | ||
| show conn count | show conn count | ||
| show processes cpu-usage sorted non-zero | show processes cpu-usage sorted non-zero | ||
| - | fw01/dc.grapeshot.co.uk/ | + | fw01/dc.mycompany1.co.uk/ |
| | | ||
| PERFMON STATS: | PERFMON STATS: | ||
| Line 279: | Line 296: | ||
| \\ | \\ | ||
| - | | + | |
| - | | + | |
| - | | + | |
| - | | + | |
| | | ||
| \\ | \\ | ||
| Line 339: | Line 356: | ||
| \\ | \\ | ||
| **NAT** | **NAT** | ||
| - | | + | |
| Several exempts: | Several exempts: | ||
| from inside to inside | from inside to inside | ||
| Line 493: | Line 510: | ||
| \\ | \\ | ||
| - | ldngs28vpnfw01# | + | ldngs28vpnfw01# |
| Active SA: 11 | Active SA: 11 | ||
| Line 504: | Line 521: | ||
| \\ | \\ | ||
| | | ||
| - | ldngs28vpnfw01# | + | ldngs28vpnfw01# |
| peer address: 213.61.9.96 | peer address: 213.61.9.96 | ||
| Crypto map tag: outside_map, | Crypto map tag: outside_map, | ||
| Line 826: | Line 843: | ||
| Network Operations profile: | Network Operations profile: | ||
| - | ukvpn.marketaxess.com/ | + | ukvpn.mycompany4.com/ |
| Line 951: | Line 968: | ||
| - | vpn.marketaxess.com | + | vpn.mycompany4.com |
| - | usvpn.marketaxess.com (legacy?) | + | usvpn.mycompany4.com (legacy?) |
| - | ukvpn.marketaxess.com | + | ukvpn.mycompany4.com |
| Anyconnect. To check who is currently connected: | Anyconnect. To check who is currently connected: | ||
| Line 978: | Line 995: | ||
| - | Essential resource: NAT cheat sheet: See: http:packetpushers.net/cisco-nat-cheat-sheet | + | Essential resource: NAT cheat sheet: See: [[http://blog.packetsar.com/wp-content/ |
| + | \\ | ||
| + | {{: | ||
| - | + | {{: | |
| Packet flow: | Packet flow: | ||
| Line 1116: | Line 1135: | ||
| Unified NAT is used instead of NAT order meaning to down and more specific first order. | Unified NAT is used instead of NAT order meaning to down and more specific first order. | ||
| + | |||
| Review " | Review " | ||
| Line 1300: | Line 1320: | ||
| + | ---- | ||
| + | |||
| + | conf t | ||
| + | pager 0 # to stop scroll pauses | ||
| + | | ||
| ---- | ---- | ||
| + | |||
| **FIREPOWER** ( new evolved asa ) \\ | **FIREPOWER** ( new evolved asa ) \\ | ||
network_stuff/cisco/asa.1598181872.txt.gz · Last modified: (external edit)
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
