HOW TO INSTALL AND CONFIGURE CISCO ASA 8.4 WITH ASDM ON GNS3

 CISCO ASA 8.4 WITH ASDM ON GNS3;

This guide shows you how to install ASDM for cisco ASA Firewall on GNS3. You will establish ASDM session from your machine to GNS3. So you will be building connection/bridge between GNS3 and PC. Note: First you will have to copy ASDM via TFTP to Firewall

Step 1:

Add a loopback adapter to Windows 7, Windows XP
To manually install the Microsoft Loopback adapter in Windows XP, follow these steps:

• 1. Click Start, and then click Control Panel.
• 2. If you are in Classic view, click Switch to Category View under Control Panel in the left pane.
• 3. Double-click Printers and Other Hardware, and then click Next.
• 4. Under See Also in the left pane, click Add Hardware, and then click Next.
• 5. Click Yes, I have already connected the hardware, and then click Next.
• 6. At the bottom of the list, click Add a new hardware device, and then click Next.
• 7. Click Install the hardware that I manually select from a list, and then click Next.
• 8. Click Network adapters, and then click Next.
• 9. In the Manufacturer box, click Microsoft.
• 10. In the Network Adapter box, click Microsoft Loopback Adapter, and then click Next.
• 11. Click Finish.

To manually install the Microsoft Loopback adapter in Windows 7, follow these steps:
The key step I was missing was how to find the Hardware Wizard:

• 1. Click the Start menu.
• 2. Search for “cmd“.
• 3. Right-click on “cmd” and select “Run as Administrator”
• 4. Enter “hdwwiz.exe”

From that point on it’s the same approach as under Vista, i.e.:

• 1. In the “Welcome to the Add Hardware Wizard“, click Next.
• 2. Select “Install the hardware that I manually select from a list (Advanced)” and clickNext.
• 3. Scroll down and select “Network adapters” and click Next.
• 4. Select under Manufacturer “Microsoft” and then under Network Adapter “Microsoft Loopback Adapter” and click Next.

Step 2:
Restart your PC.

Step 3:
Following this guide about how to configure cisco ASA 8.4 firewall on GNS3.
Start a new Porject in GNS3 and drag/drop a ASA (8.4) firewall to the topology.

• 1. Drag/Drop Cloud Object from Panel on the Left to the topology and right click it. Select ‘Configure‘. Select ‘C1‘ or whatever name of the object.
• 2. Now as per following diagram. Select the loopback adapter that you added in step 1.

•  diagram. Select the loopback adapter that you added in step 1.
• 3. Add the adapter as per following after selecting and press OK.
  
• 4. Drop an ethernet switch to the topology. If you don’t do this and try drawing a direct connection between Firewall and Cloud it will come up with error saying ‘Devices does not support this type of NIO. Use an ETHSW to bridge the connection to the NIO Instead.
  5. Connect both Cloud and Firewall to the Switch as picture below:
  
• 6. Now start all devices in GNS and use following commands on the firewall to give it an IP address.

ciscoasa# config t
ciscoasa(config)# int gi
ciscoasa(config)# int gigabitEthernet 0
ciscoasa(config-if)# ip address 172.30.1.1 255.255.255.0
ciscoasa(config-if)# nameif management
ciscoasa(config-if)# no shut

• 7. Now, go back to Windows 7 and open ‘Network and Sharing Centre‘, Click on Change adapter settings and Change the IP Address of the Loopback adapater as following

• 8. You will have to turn off your PC firewall. Because you will be copying ASDM to ASA firewall. If you don’t know this, stop studying networking or stop the Windows Firewall Service or if that doesn’t work then Base Filtering Service.
• 9. Now you PC is ready to talk to firewall, lets try.

ciscoasa# ping 172.30.1.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 172.30.1.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/6/20 ms
ciscoasa#

Step 4:

• 1. OK, Now the next step is to copy ASDM to Firewall. If you already have TFTP Server installed, cool otherwise Download and start this TFTP Application from following website: http://tftpd32.jounin.net/tftpd32_download.html
• 2. Download ASDM from Cisco website or any other source you have. I have ASDM 6.47Download Here:
• 3. On the TFTP application browse to the folder where you have downloaded ASDM.
• 4. On the firewall use following command to download TFTP Image.

ciscoasa# copy tftp flash
Address or name of remote host []? 172.30.1.2
Source filename []? asdm-647.bin
Destination filename [asdm-647.bin]?
Accessing tftp://172.30.1.2/asdm-647.bin.!!!!!!!
Writing current ASDM file disk0:/asdm-647.bin
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
17902288 bytes copied in 55.470 secs (325496 bytes/sec)
ciscoasa# config t
ciscoasa(config)# asdm image flash:asdm-647.bin
ciscoasa(config)# http server enable
ciscoasa(config)# http 172.30.1.2 255.255.255.255 management
ciscoasa(config)# username cisco password cisco privilege 15

• 5. Using ‘wr‘ command and then reload the firewall using ‘reload‘ command

Step 5:

• 1. Launch your browser and go to https://172.30.1.1 (Disable Proxy if you are using any)
• 2. Download and Install ASDM App from website you browsed to.
• 3. Launch the ASDM. Login username and password. Done!