Hi my name is you have from Teach epics.
Welcome you all to Cisco firewalls course.
In this video we will cover that configuration of the is a firewall to be aesthetic not relative to
act as a static net.
So as we explained in the previous video there are some steps to be taken in order to accomplish this
task.
OK first of all what is the purpose of this lab.
The purpose of this lab is to allow this insight.
P.S. In the inside network which has the name of admin to communicate with a remote P.C. which has this
IP address.
So mainly what we need to do is translate this private IP address to a public IP address which would
be this one.
The one ending to 0 1 the 10 in order to communicate with this remote P.C..
OK so again the translation will be from this IP address the private through this IP address which is
the public so the remote B.C. will communicate with this admin P.C. through this IP address.
OK.
Which is that what we call the mapped IP address or the IP address that replaces the private IP address.
OK.
So first of all we need to assign IP addresses as shown in the diagram.
We need to provide IP addresses for both interfaces on the firewall inside outside.
We need to provide an IP address also for this P.C..
OK.
By the way the gateway here for this P.C. will be that inside IP address of a firewall which is this
one.
OK.
So it will have ten to one to two the 27 the gateway will be 10 to 1 the 2 the 21 the subnet mask is
24 on both the private and also the public.
So let's do this practically on Cisco Packet Tracer
let's open Packet Tracer.
Here you go.
I grab the ready 5 5 or 6 8 is a firewall.
I grabbed a P.C. and I will grab another P.C. which will be very busy.
Let's connect the P.C. to the firewall gigabit one over to to the network interface card of the P.C..
Now let's configure the IP addresses.
Let's start with the P.C. OK.
So we go to the configuration tab.
Fast ethernet zero.
And we will give it the IP address of 10 the 1 to the twenty seven with the subnet mask.
We will change it from the default of 8 to 24 which 2 5 5 2 5 5 2 5 5 0.
Now we need to provide the gateway for this CPC
so let's type here to the Gateway then the 1 2 1
ok then 1 2 2 7 and 1 2 the
let's take this again
all right.
And that's it.
That's all we need to do close this go to the firewall now.
Go to the configurations that we can provide IP addresses here change the hostname here or we can use
that command line interface which is the teal eye.
So let's use the seal eye instead to show how actually those commands work.
First of all we need to enter that enabling mode.
So we type enabled it will prompt me for a password by default that is not possible.
So just press enter.
I'm inside now that privilege mode.
Let's consider.
So this type configured ternary
press enter.
Let's change the hostname which is by default at Cisco is a two.
This hostname we would name it net as out of B which is a short form that.
So that it's out of V.
Let's
change the name we type hostname
not s r v that's it.
Now we need to configure the interfaces to inside and outside so let's go first to interface gigabit
to 1 over to
1 over 1 by default x 1 9 2 1 6 8 1 1 which we will be changing here to 10 but 1 to one which is this
one right
so let's do that
so we type interface to its small interface.
Short is I I.A. I am three step interface G I which is a if it is a net one over one.
Now I'm inside the interface configuration mode we will give it an IP address of
then the one the two the one and the subnet mosque will be 2 5 5 5 5 2 5 5 0 enter.
Now we need to name it we give it a name we need to provide this g i or Gigabit Ethernet one over one
with an inside name it will be the inside interface.
So you see the IP change at the ready let's
use the command name what interface name if and we name it inside.
OK.
Now by default the interface is down.
So let's issued a command no shutdown or no shut
press enter.
That's it that's all I need.
Now type except
we will configure now the outside interface which is gigabit.
One or two.
So we type interface G I won over to IP address we need to provide with an IP address so type IP
IP address what will be the IP address here.
This 1 2 0 9 1 6 5 2 0 1 the 10 which will be the public IP address for there is a firewall.
So let's type this IP 2 1 9 1 6 5 2 1 2 0 9 1 6 5 2 0 1
10 the subnet must also will be 24.
So 2 5 5 2 5 5 2 5 5 0.
Let's now make this interface an outside interface so let's type name if
outside and again we need to bring this interface up.
So we type no shot down that's it.
The interface is configured let's use controls it in order to check this configuration controls it let's
check if the configuration have been changed so we type show IP address
boom here you go the inside has this IP the outside has this public IP and everything is okay.
Both interfaces are up and running.
Now let's configure
that security also security level we need to provide security live it for each interface.
So let's go again to interface G I.
1 4 4 1
we need to type configure getting our first
interface.
Gee I won over one.
And we will assign security level of zero
the inside by default is 0.
So security live 0.
If you do remember the command just type is as easy and the command will complete automatically.
By the way after we finish this configuration I have the complete lab to configure my right
so let's give for that inside interface live one 100
byte exit we go now to that outside interface so interface.
Gee I won over to security level 0.
That said we press control Z
and you're done.
Now let's check this configuration.
We type shortening configuration or show run.
Here you go.
This is our configuration here.
Everything is okay up and running the IP address the name and the security level.
Now let's see if this configuration.
So we type.
Copy running start or just type s.t..
Press tab and again enter now configuration saved.
All right.
So always try to save your configuration before you proceed to the next step.
Just to make sure if anything happens you didn't lose the conflagration that you spent time doing.
All right so let's move to the next step the next step is to create an object named admin which is the
name of this insight.
P.S. As I mentioned in the previous video so configured damnit.
We type object to network
if you don't remember just type question mark after object to give you what you have to write or type
object network we will name it admin.
Now we need to give this admin an IP address.
We will use the war or the command post and we will give it this IP address so they post than the one
that do the 27
that's it.
Right.
So now we created an object called admin.
We gave it an IP address.
We configure the admin P.C. with a way of 10 to 1 to 2 the one we configured both interfaces the inside
and the outside and we give it security live.
Now we need to issue the command actual command for I which is then not either inside or outside or
not outside.
Inside depends on what we need to do.
We need here to match from the inside to the outside.
We need the inside IP address to be translated to the outside so we will use the net inside outside.
So let's do this inside the same prompts here which is configuring network object.
We type net
again.
If you do remember just type question mark it will give you what you have to do.
Right.
It gave you the same Centrex comments antics your type.
First the really interface that interface here is the inside and then the mapped interface the mapped
interface is the outside OK.
The inside is having this IP address and the outside is having this IP.
So if you just type not bracket inside.
Come on outside
the firewall we understand already the IP addresses of the inside and outside which actually we configure
every year when we configured those two interfaces.
OK.
So we type not inside outside.
Then since we need a static nothing here we need to use a step in nothing.
We type static
again.
If you don't remember what to type.
Just type question Mark you see it shows you either you type dynamic which is dynamic nothing or static
nothing we need static here.
So type static you do remember.
Question mark.
Here you go.
It gave you the prompt that you would have to type the IP address of the mapped interface or the map
IP address which is in our case this one.
So mainly let's be clear about those getting anonymous maps IP means the public IP that will appear
instead of the inside.
Private IP so in our case it's this one.
So let's type it
2 0 9 1 6 5 that 2 0 1 that 10 press Enter
okay.
And again savior conflagration but before you save just press controls that you cannot save while you're
inside this prompt you have to press controls it controls it enter then copy
from start again enter configuration is saved.
So it's very easy actually.
We just gave interfaces IP addresses we named each interface inside and outside.
We give security level and we created an object gave the object an IP and then we used the Net inside
outside.
All right.
So now let's check if our net configuration actually applied correctly.
So we will type show net show just as much net here you go the output of the show and that shows me
that I am nothing from the inside to the outside that they cannot think for this object which is the
name ad to this IPA.
So it's very clear right.
So it's very obvious and clear I hear nothing from inside to outside.
The source is aesthetic nothing for this B.S. which is the name has the name of ad.
And here is that public IP that will be used for the admin B.C. to go from inside to outside.
Perfect okay.
So what's missing here.
We actually almost done here so let's go
and type again show running configuration to see the whole full configuration okay.
IP addresses
just keep pressing enter.
To go down to move down 18.
Go it shows object network admin has this IP address and we have nothing from inside to the outside
static type of static.
This is the target or the mapped IP address so everything is okay.
Perfect that's all we need in order to configure the static nothing.
After you finish all the steps you will see all actually connections appear as green traffic is passing.
He does the full configuration here beside the lab.
So
that's all for this video.
I hope he enjoyed it.
And the next bit you we will discuss actually what we call access control list by the way this is actually
a snapshot or a screenshot of our lab with that full configuration in it.
So the next video.
As I said we will explain and cover the topic of access control list and then we will have a lab on
the access control list using Cisco packet tracer.
Thank you for watching and see you in the next video.