ASA configuration with GNS3: Step by step (Part 1)

You can find the spanish post in: Configurar un ASA con GNS3: Paso a paso

What is GNS3?

GNS3 is an open source software to simulate complex networks as closely as possible to a real network. This tool is very suitable for preparing some of the Cisco certifications: CCNA, CCNP or CCDP.

ASA’s configuration

After this little introduction, you have to follow the next steps for configuring a Cisco ASA using GNS3:

1. Run GNS3.

2. Download the ASA 8.4 file for GNS3, at the following address:

http://www.mediafire.com/download.php?l010dd0c1nayf0d

Download the next files too by internet:

asa842-initrd.gz

asa842-vmlinuz

3. When GNS3 is running, in the tab above you have to press:

Edit → Preferences

4. Select the  “ASA” option in “Qemu” tab.

Complete the next fields:

Identifier name: the ASA name that you choose at the configuration

RAM:  512MB, although it can work with less

Number of NICS y NIC:  by default

Qemu Options: -vnc none -vga none -m 1024 -icount auto -hdachs 980,16,32

Intrid:  asa842-initrd.gz file is loaded

Kernel: asa842-vmlinuz file is loaded

Kernel cmd line: -append ide_generic.probe_mask=0x01 ide_core.chs=0.0:980,16,32 auto nousb console=ttyS0,9600 bigphysarea=65536

5. Press “Save” and after “OK”.

6. Press over the cloud with the right click and select  “Configure”. A window is opened as the next picture:

At the first  “Generic Ethernet NIO” tab, select the network card.

In this case “Local Area Connexion” and after you have to press to the “Add” button.

Finally push “Apply” and “OK”

 7. At the GNS3 main screen, move  a “ASA firewall”, a “Ethernet switch” and a “Cloud” and and connect all of them

 

8. The “Ethernet Switch” device,  have to have the default configuration:

9. Press into the  ASA using the right click and select  the “Start” option.  After you have to press double click over the ASA and the console commands will run

10. For a correct ASA configuration through command console, follow the next steps:

ciscoasa> enable
Password:
ciscoasa# activation-key 0x4a3ec071 0x0d86fbf6 0x7cb1bc48 0x8b48b8b0 0xf317c0b5

Validating activation key. This may take a few minutes…

Proceed with update flash activation key? [confirm]

The flash permanent activation key was updated with the requested key,

and will become active after the next reload.

11. When the last process is over, proceed to assign an IP to the Cisco ASA firewall. At the commands console write the next:

ciscoasa#config t 
ciscoasa(config)# int gigabitEthernet 0 
ciscoasa(config-if)# ip address 10.10.10.1 255.255.255.0 
ciscoasa(config-if)# nameif management 
ciscoasa(config-if)# no shut

You have assigned to gigabitEthernet 0 interface , that IP: 10.10.10.1 255.255.255.0

and the interface name choosen is: “management”

 

The second part can be found at: ASA configuration with GNS3: Step by step (Part 2)

 

Javier Nieto León

REFERENCIAS:

http://www.gns3.net/

http://www.cisco.com/