GNS3 - How to configure GNS3 and Cisco ASA Firewall

[nydanv]

The site you specify is no longer up. Where can we get the files?

[CCNAVIDEO]

IT'S NOW AVAILABLE AT

cozzi.co.uk/

[chrm904]

@CCNAVIDEO

its not even available on your new ewbsite...

[CCNAVIDEO]

cozzi.co.uk go to the free tools tab

Click on the link - follow the instructions

[fromindia2008]

THANK YOU so much !!!!!!!!

[infernobass]

thanks paul

[alanblotto]

Hi everything worked great until I tried to run a ping, I connected the ASA back to back with a router and the ASA could not ping it, it can't even ping it's own interface and arp table is empty... any ideas? this looks like a bug to me... unless I am missing something...

ciscoasa# show arp

ciscoasa# ping 200.0.0.2

No route to host 200.0.0.2

Success rate is 0 percent (0/1)

ciscoasa# show arp

ciscoasa# show ip address

Ethernet0/0 200.0.0.2 255.255.255.252

Interface Ethernet0/0 "", is up/up

[CCNAVIDEO]

Hi do a show interface ip brief. You will probably notice that nothing is assigned right? you need to use the nameif command before applying any other info to the interface. so in your case assumming the e0/0 is outside type .. conf t int e0/0 nameif outside (notice the security level will be set to 0) ip address 200.0.0.2 255.255.255.252 no shut end Hope this solves your problem. regards Cozzi

[mherring40]

Very nice! It's a little more tricky if you are on Linux though :-( Once i got QEMU working this was spot on!

Did you ever do a video for ASDM? I would be very interested in that as i have just started using ASA's.

[alhaddad1000]

hi, i did the same steps with GNS 3.0.7.4 windows vista and the ASA did not start whenever i press start nothing is happening !!! still red icon on ASA router any help please

[CCNAVIDEO]

Does Qemu start? check your settings under edit\preferencesqemu ... press the TEST tab ... does it work ?

[alhaddad1000]

@CCNAVIDEO

thanks for the quick reply---i did reisntall the GNS 3 and it worked fine, the problem could be if i have old version of the GNS and i do the upgrade to newer version i need to remove it and reinstall then it will work!!!!

is there any new version for the ASA newer than 8.2?

[sirsquirrel0]

Absolutely spot on.. worked first time.

[hufnmouth]

Top notch vid man!

[jovan88]

great video, waiting on asdm config

[mibzzz01]

hi - great video. awaiting for your video on how to configure ASDM. do you hvae any timeframe when we will see the premiere for it?

many thanks

[SuPaDuPaUpAa]

Nice video, but too bad I can't get my Win7 64bits to work. Whenever I run the console it keeps on staying on the blank black screen .. sigh , any help would greatly appreciated. Thanks Joe

[CCNAVIDEO]

copy and paste this in the blank window....

cd /mnt/disk0

/mnt/disk0/lina_monitor

To avoid the blank screen start the console immediately after starting the firewall .. 64bit w7 is pretty quick at loading qemu and the asa so you might miss it if you take to long to start the console hence the blank screen ...

[arnoldlane842]

@CCNAVIDEO Have tried this on xp pro and Win 7 Ultimate and both BLANK console with no cursor to paste anything into.There is obviously an issue and the not opening the Console session Quickly enough theory doesnt sound credile to me TBH.There may well be other issues that myself and other users are encountering. But hopefully some1 wil find a fix soon I was hoping to get some hands on exp on asa soon.

Regards

[CCNAVIDEO]

Hi

As you can tell this works for most people and for those that experience issues with a blank screen. Just hit enter you should see a cursor appear then cut and paste as per instructions. Have a look at cozzi.co.uk watch the video again and make sure you follow it. Trust me it works.

thanks

[arnoldlane842]

@CCNAVIDEO Thanks for the reply I dont see a cursor when I open the session .I am not doubting that it does work all I am saying is alot of this stuff is new and people will have issues and I am doubting the Fix you suggested ie ; not opening the console session quickly enough and maybe someone may come up with a solution as I lost a couple of hours study time trying to get this to run to no avail!

[CCNAVIDEO]

hit enter on the blank screen ... you should see a # then cut and paste as suggested. OR

start the console immediately (a split second) after starting the asa .. you should see a load of text as the ASA loads... good luck

[Rford626]

@arnoldlane842

Are you using the asa802-k8.initrd.gz or asa802-k8.initrd file. I was having the same blank screen with blinking cursor until I checked the file I was using. Don't use the extracted file and it will work fine. So happy this is finally working. Now I can study for my CCNP Security!

[arnoldlane842]

@Rford626 Thanks Man I set up asa without extracting the 802-k8.initrd file and it has consoled in to the ASA.

I am sure I will be able to get it running from here. I never thought of that being the problem. Again fair play and thanks for taking the time to post your FIX!!!!!!!!

Cheers

Arnold

[Actnjacksn1]

everything working fine thanks for the instructions. But I can't ping any connected devices. Can you help or anybody? Thanks for ur help in advance.

[CCNAVIDEO]

hi - make sure all desktop firewalls are turned off. Use switches between the ASA and other devices. Make sure the ASA can ping its local interface (if not - no shut needs to be issued).

checkout "ASA as a desktop firewall"

[shreyans1985]

@CCNAVIDEO

I followed all the above mentioned instructions but still i'm only able to ping the inside network from my firewall

but when i try to ping the outside network from the firewall ping is not happening even after applying :

Nameif inside and outside along with no shut.

Access-list permitting icmp for any source to any destination and applying this access list to the outside interface

[CCNAVIDEO]

Hi

Clearly you have an issue either with whatever it is you are trying ping or the outiside interface itself. MAke sure all devices can ping themsleves and then check if they can ping each other on the same segment.

regards

Cozzi

[RockerverbFX]

You do realise most people who cant get this to work are using Vista or Windows7... thus what you have shown is useless...

[CCNAVIDEO]

This does work on Windows 7 .. no diiference to XP! In some instances you may have a blank console but thats because you need to start the console immediately after you start the ASA. I was going to recreate the video using Windows7 but it really is no different so why bother, Plus most people working with Cisco kit are savvy enough to figure out any minor diffences between the OS and GNS3.

But thanks for your comments ... really helpful.

[dontaylor2]

I run Win7 64-bit and also had trouble getting into my VMs until some further research showed what I was missing. Under Preferences > Qemu, there are two places that say "localhost" - IP/host binding and External Qemuwrapper. I had to change both of these to 127.0.0.1, but once I did I had no trouble.

Apparently there's something weird in the way Win7 binds "localhost"; I believe I read it binds it to the IPv6 address by default, so it requires manual tweaking in GNS. Thanks for the video!

[CCNAVIDEO]

thanks for the info - I'm sure many will find it useful. I'm running mine off Win7 64bit too and have no issues - not running VM though.

Cheers

[dontaylor2]

Sorry, just a semantic goof. When I say VM, I was just referring to my GNS emulated routers. Nothing here is running inside an additional VM.

[arielbarriga]

Hi after downloading those two files the init and the kernel and click apply and save it. then go back to my GNS3 console when i drag the ASA firewall to the right pane then it says Please configure an ASA. thanks

[musheer2]

@arielbarriga I had similar issue. I did the following and it solved it.

in Identifier name give a name (asa8)

then after you browse and select Initrd and Kernel file click on Save.

then click on Apply and then ok.

This should fix it.

[CCNAVIDEO]

to save the config in GNS3 ASA checkou

cozzi.co.uk



[itsasfi]

Excellent Video...

[navlesh123]

thanks,,,,,,you...so many time...

[mibzzz01]

Many Thanks for sharinf this, works great!!! When is the premiere of ASDM video:)?

[mibzzz01]

Many Great Thanks for creating this video as it works smoothly!!! When is the premiere of ASDM:)))?

[damaniaz]

You mention about a video in the end with a scenario. Please can you provide the link to that video. Thank you.

[nycalien]

Thank you very much for the video. However I wasn't able to configure an "interface Vlan" on the device as you have to have different interface vlans for "inside" and "outside". Can it be done?

[utubxplorer]

Great Tutorial Thanks a lot.

[colandhot1]

hi thank for help . what i have facing a problem , when i try to save the config it gives the error (not enought space)

[CCNAVIDEO]

Hi - yes I still haven't solved that problem but there is an easy work around .... sh run .. copy and paste into a text file. The next time you start the ASA paste your saved text file back in to the ASA.

[Niaggalover]

11!DUDE!!! thanks!!! I've been looking for this all over google and nothing, your the best man

[baranimcse]

Thanks a lot bro. I have been trying to do ASA in GNS3 but nothing worked. After seeing your video, it became like a piece of cake. Thanks once again

[adeelasher]

Thanks !!!!

[rmarti00]

What's the operating system that are you running? Isn't working for windows7.

[CCNAVIDEO]

@rmarti00

Windows XP .. Not tried it on Vista .. check that Windows Firewall is turned off.

[mrsfatih]

Thank you!

[uclasql]

hi after i installed the all the required files , I started my console i got this

# ?

-ash: ?: not found

# help

-ash: help: not found

can't go anywhere from here 

[CCNAVIDEO]

@uclasql

Hi - did you cut and paste as per the video (2min 11 secs)

cd /mnt/disk0

/mnt/disk0/lina-monitor

Once this is entered the ASA should begin to load.

[xstuartfbarrettx]

@CCNAVIDEO It's actually

cd /mnt/disk0

/mnt/disk0/lina_monitor

[ashoaib]

thanks a lots for you help i was looking for this for along time keep it up