Hello and welcome to this lecture in this lecture we start the configuration of the Cisco NSA firewall
in order to have it ready for connectivity from the windows management station through SDM.
So basically to the graphical user interface so that we will configure for the IPC VPN using VPN side
to side to the HQ site.
So first of all we'll have to configure IP addressing and we will also configure the IP on the Internet
rather so let's finish with that first.
So gigabit 0 by 2 interface gigabit 0 by 2.
It has the IP address of 100 that one hundred the one hundred dot 1 or 1.
And it's a slash 30 mask so 2 5 2.
And I will say no shut.
And also.
Right.
The configuration
and that's it.
So configuration of the Internet cloud rather anyway.
It's it's done.
Now let's jump to the Cisco essay.
So right click and I will say console just increase a little bit and let's do the configuration so enable
no password just hit enter and let's start with gigabit.
So would you like to enable anonymous or run.
Good.
So interface gigabit 0 by zero.
This is the when the one facing interface first of all forces voice say You have to provide a name a
name for the interface and we will say this is outside.
Let's see an IP address now.
So IP address 100 out 100 that 100 that 1 or 2 and 2 5 5 2 5 5 5 5 2 5 2 also no shut.
Let's now also configure gigabit 0 by 1.
So the the land facing interface interface gigabit 0 by 1 and let's say IP No.
First of all do not forget the name interface name if because otherwise it will not work.
The interface will not be initialized.
So name if we'll call it inside.
And now we can say IP address.
What.
1 9 to the 1 6 say that 3 that 1 2 5 5 5 5 5 5.
Yeah.
It is slated to be 4.0.
Good.
And if you now say show name if you can see that we have two interfaces and management as well.
So the name run interface management management 0 by 0 name even management 1 and 2 168 1 that one this
is not good.
We will say interface management let's say interface management 0 by 0.
The IP address is 172 the 30.
The 100 that 1 2 5 5 5 5 5 5 that 0 so and and it seems right to say the configuration show interface
ip brief and let's see all of the interfaces.
So we have we have that too.
Well I forgot to do a no shutdown on this one gigabit 0 by 1 I will do it right now up up this is the
IP address.
Perfect.
So let's go now configure terminal interface gigabit 0 by 1 and say no.
Shut down and let's check again.
So show interface ip brief.
Perfect.
So all of the three interfaces have the necessary IP address configured and they're in the up upstate.
Perfect.
So now one less thing to do we have to enable something and you will see exactly what I mean.
On the Cisco I say so that the Windows Windows machine can actually connect connect through HDTV.
So from from a browser through a is the M or or basically through an authorization to keep your browser
in the first place if you don't have is the configured.
And then when you install the software on your P.C. through that through that P from that user and password
that we will define on they say you'll be able to configure your euro as a device anyway the configuration
you need is this.
So we'll have to define the user name.
Let's say Cisco password Cisco and privilege 15 will also have to enable EDP.
So HDTV server enable.
Means that the NSA now accepts ATP connections and we also have to say Well so what's the subnet IP
that the HDTV request will come from.
So if you now say ETP in question mark for the first fourth row here hostname or ABC this is the IP
address it says the IP address of the host and the network authorized to access the ATP server.
So I will say now anything although it's not good to do it in the production and I would say that the
connection will come through the management interface and you can see that we have a management connection
from the management interface to the windows station.
So I would say just enter now.
And and again save the configuration one last thing to do is to test basically I ICMP connectivity between
the windows machine and the SSA and also check to see if the if the browser lowers the SDM or lowers
the interface of this is crazy.
So let's go and do that.
Let's go to the Windows machine and open up command prompt.
Let's see.
Can't remember exactly.
Probably I haven't configured yet.
Yes I didn't.
So we have to configure the interface the niqab for the management connection to the NSA.
So the last one is disabled.
So I'll see enable now and let's say also properties and once it loads let's go to DPP for properties
and the IP address that should be configured is 170 to thirty one hundred that one hundred.
So let's do that so use the following 172.
Thirty one hundred one hundred and this is uh slash 24.
And I will just click okay and close and close this ones to and now let's check again and see if we
have the IP address configured here.
Yes it is.
Now let's try to being the management.
IP address of the safe.
And we have reached ability so you can see here on the desktop that I have installed already Cisco is
the M launcher.
So if you'd if you just double click it something will appear here in a second.
And anyway we will have the possibility to connect to their say so the IP address username and password.
Remember we have just defined it and so on.
But if you don't have the software installed in the first place you'd have to go to a browser.
Again the NSA has been configured to act like an HDTV server and you would say 172 in this case thirty
one hundred and one no one hundred and one and you can see that.
It's just like you would connect to a Web site.
So click Advanced then proceed and here is the is the interface.
So you have the option to install as the launcher now or Randy as the monitor and install it is the
M S the M software.
So Ron Cisco is done as a local application.
Once you install the software and you have it available on your desktop like you can see here you can
use it with.
You can use it to connect to whatever you have.
It doesn't matter.
So it's not one for one software per say so use the name Cisco.
Let's also say passwords Cisco and I will click OK so do you want to continue connection is untrusted
anyway.
We know what it is.
So just click on continue.
And now the Cisco SDM IBM launcher should start.
Let's wait.
Software Update completed and we we should be provided with the user interface.
And here it is.
So basically now just a short recap we have configured IP addressing on the Cisco assay both on the
public or one side and also on the private or land side.
We have also configured access on the management port through SDM from the windows machine.
So basically we are now ready to start the configuration both of the H2 for the gate and the Cisco as
a firewall for that IP Sig VPN side to side.
So thank you for your time and see you in the next lecture.