[EVE-NG] ASA - Site to Site VPN between ASA (1부)

보안

[EVE-NG] ASA - Site to Site VPN between ASA (1부)

검은체리 2019. 12. 24. 17:22

- Eve-ng 네트워크 설정은 Bridge로 내 PC IP와 같은 네트워크. (192.168.2.0/24)

- My PC : 192.168.2.16/24

Switch1

interface Vlan1
ip address 192.168.130.10 255.255.255.0
no shut
!
ip route 0.0.0.0 0.0.0.0 192.168.130.1

ASAv1 (For ASDM)

interface Management0/0
no shutdown
nameif mgmt
ip address 192.168.2.11 255.255.255.0
!
route mgmt 0 0 192.168.2.1
route outside 172.16.10.0 255.255.255.0 111.111.111.2
!
http server enable
http 192.168.2.0 255.255.255.0 mgmt
!
username admin password cisco privilege 15
!
policy-map global_policy
class inspection_default
inspect icmp
!

- ASA mgmt IP (https://192.168.2.11) 접속하여 ASDM 설치 (JAVA 설치 필수)

- ASDM 실행

- Configuration -> Device Setup -> Interface Setting -> Interface
1. Outside 설정

2. inside 설정

- Wizard 사용하여 설정 시작

CLI 참고

ASAv2 (For ASDM)

interface Management0/0
no shutdown
nameif mgmt
ip address 192.168.2.12 255.255.255.0
!
route mgmt 0 0 192.168.2.1
route outside 192.168.130.0 255.255.255.0 111.111.111.1
!
http server enable
http 192.168.2.0 255.255.255.0 mgmt
!
username admin password cisco privilege 15
!
policy-map global_policy
class inspection_default
inspect icmp
!

- ASDM 파일 복사 없이 ASDM 바로 실행 및 접속
- Tools -> Upgrade Software from Local Computer
- ASDM File Upload 이후 재실행 필수

- Configuration -> Device Setup -> Interface Setting -> Interface (반복)
1. Outside, Inside 설정

- Wizard 사용하여 설정 시작 (반복)