Creating Zones on ASA5580

[cisco]

Hi,

      Please help on creating Zones on ASA5580 , if anyone could refer some doc on this as i am new to ASA.

regards

Neo

[mirober2]

Hi Neo,

When you say "zones", what are you referring to or what are you trying to accomplish? Are you looking to setup multiple interfaces/subnets or multiple firewall contexts? Let us know and we can point you toward some documentation that should help.

-Mike

[cisco]

Hi,

     I want to create different security zones e.g. DMZ etc.

regards

Neo

[Frank Vo]

When you refer to "zones" it suggests you might be looking for something similar to the IOS Zone Based Firewall? On the ASA platform the concept is a little different where we utilize security levels among other things to determine the permitted/denied traffic flows.

Perhaps take a look at the example link below and let us know what you are trying to achieve and someone can help you out further.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094769.shtml

Thx

Frank

[mirober2]

Hi Neo,

Thanks for clarifying. What you'll want to do is setup one ASA interface per "zone" that you want to configure. The basic interface parameters you need to configure are:

nameif

ip address

security-level

Here is a guide that will show you some examples and the command syntax needed:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/intrface.html

If you have any questions about the configuration, feel free to let us know.

Hope that helps.

-Mike