ACH Network Professional Training Center

Cisco ASA Firewall Configuration (Part-2)     OSPFv2 Dynamic IP Routing on the Cisco ASA Firewall ကဲဒီေန႔ေတာ့ ASA Firewall နဲ႔ OSPFv2 တြဲစမ္းၾကတာေပါ့ .... အေပၚကပုံမွာျပထားတဲ့  OSPF Configuration Commands ေတြအတိုင္း လက္ေတြ႕လုပ္ႏွိုင္ၿပီျဖစ္ပါတယ္။ Cisco ASA Firewall နဲ႔ OSPF Routing Protocol အေျခခံအနည္းငယ္ေတာ႔သိထားရမွာျဖစ္ပါတယ္။ ospfv2 verification commands for cisco asa firewall ASA1# show interface ip brief ASA1# show route ASA1# show ospf interface ASA1# s how ospf neighbor ASA1# show ospf database Supported Routing Protocols for ASA Firewall Dynamic IP Routing •Enhanced Interior Gateway Routing Protocol (EIGRP) Enhanced Interior Gateway Routing Protocol (EIGRP) is an advanced distance-vector routing protocol that is used on a computer network to help automate routing decisions and configuration. The protocol was designed by Cisco Systems as a proprietary protocol, available only on Cisco routers. Partial functionality of EIGRP was...

Cisco ASA Firewall Configuration (Part-1) ASA Firewall Interface Security Levels and Interface Configuration ASA Firewall တြင္ security level ဆိုသည္မွာ Firewall ၏ interface မ်ားတြင္ သတ္မွတ္ေပးထားနိုင္သည့္ ယုံၾကည္စိတ္ခ်ရမႈ (trusted value) တန္ဖိုးမ်ားပင္ ျဖစ္သည္။ သတ္မွတ္ေပးနိုင္ေသာ တန္ဖိုးမွာ 0 မွ 100 အထိျဖစ္သည္။ Firewall ၏ interface တစ္ခုသည္ network တစ္ခုကိုခ်ိတ္ဆက္ထားရာတြင္ interface တြင္သတ္မွတ္ထားေသာ security level တန္ဖိုးျမင့္ေလေလ ၎ network ကိုပို၍ ယုံၾကည္စိတ္ခ်ရေသာ network တစ္ခုအျဖစ္သတ္မွတ္နိုင္ေလျဖစ္သည္။ ဥပမာ- Internet ခ်ိတ္ထားေသာ ouside network security level = 0 Origanization ၏ private network / Inside network security level = 100 DMZ network security level = 50 ASA Firewall Default Traffic Flow • ASA Firewall တြင္ default အေနျဖင့္ high-security-level မွလာေသာ packet တစ္ခုသည္ lower-security-level interface သို႔ packet forward ျပဳလုပ္ေပးနိုင္သည္။ • ထို႔အျပင္ ASA Firewall သည္ stateful packet filtering function ရေသာေၾကာင့္ forward ျပဳလုပ္လိုက္ေသာ packet တစ္ခု၏ state informatio...