Objectives
The simulator ticks each one as soon as the network meets it.
Open ASA1 and answer yes to “Pre-configure Firewall now through interactive prompts”, or type setup in configuration mode.
Routed mode, enable password Lab123, keep password recovery, and today’s date and time.
Inside address 192.168.1.1, mask 255.255.255.0.
Host name HQ-FW, domain lab.local, and PC1 (192.168.1.10) as the Device Manager host.
Write it to flash, then ping 192.168.1.1 from PC1. show running-config shows what each answer became.
Before you start
Press Enter to take the default in brackets. A wrong answer is asked again with the reason. The wizard only configures the inside interface: outside, routes, NAT and rules come next, as in the following labs. Any answer at the first question that is not yes or no skips the dialog and runs as a command.
Concept
First boot: the setup dialog
A firewall with no configuration offers to configure itself through questions. Each answer is checked as you type it, and Enter takes the default in brackets. At the end it shows a summary and, if you agree, writes ordinary configuration lines and saves them. The dialog only makes the box reachable: everything else is configured afterwards.
Concept
Firewall security levels and stateful inspection
Each firewall interface has a name and a security level from 0 to 100. Traffic may flow from a higher level to a lower one; the other way needs an access rule. The firewall remembers the connections it allowed, so their replies come back, but an ICMP echo reply only counts as a reply when ICMP is inspected.
