Windows 10: Sisco asa 5505

I got the sweet task of cleaning up the server room at work today. After a couple of hours of orientation I came to the conclusion that pretty much everything in there had been installed on top of what was there previously and with no real thought or plan put in to the function of it all. The switch is full! Just get another one and plug it in where it seems to fit and hope for the best... Kind of...
This resulted in a system running dual firewalls and patch cables running from non POE connections on the POE switch into separate POE adapters for the wifi antennas...

When I was done I was left with a boat load of patch cables (mixed cat5, cat5e and cat6), five 6-12 port 10/100 switches and "le piece de resistance", a CISCO ASA 5505.

https://www.cisco.com/c/en/us/suppor...nce/model.html

Since our latest additions to the server rack were a POE switch and a new firewall, the 5505 doesn't really fit anywhere anymore.
Except for in my personal network, that is. *chuckle
I even found the manual, the CD's and original cables. No box, though...
It's only been used as a regular switch the last couple of years. What a waste!

I plan to set it up as a VPN, but I have no idea what the hell I'm doing when it comes to setting up this kind of appliance. Will I need a helmet? Are there booby traps?
Would this be the final nail in my sanity coffin?
I've read that they can be a bit tricky to setup and that I'll need to learn to speak the CISCO command language since there's no GUI in the 5505... I think I could do that. I've learned things before. But at what cost?

Has anyone here made this work without loosing their mind or know someone who's no longer allowed to wear shoelaces after trying?
I feel that I want to know that it can be done by someone who's not working as a sysadmin before I jump in to this...

Bobo

:)

 

vpn site-to-site issues with a cisco asa

that cisco ASA has some sort of software on it that allows you to save a configuration file right?

 

vpn site-to-site issues with a cisco asa

haha. ok here goes.

So im trying to get the opensource VPN to talk with a Cisco ASA for a site-to-site VPN solution. I have an endpoint ubuntu machine using a localhost adapter, the other ubuntu has openswan installed and is a virutal machine as well on the same windows xp host. this openswan has two virtual NICs, one is localhost to talk with the other ubuntu. The second NIC is NAT to connect to the the windows machine, and the ASA beyond that. On the otherside of the asa is a laptop running XP.

Openswan and the ASA are setup to start an ipsec vpn and talk to one another. I can then send a file through the vpn with netcat. I sniff the traffic along the way, and everything is encrypted with ESP.

So everything is fine up to this point. However should I need to execute a reload or, the ASA gets power cycled, for whatever reason, the packets that are sent from the ubuntu host, get stopped after the outside interface of the ASA. If i clear the ACLs, reenter them, and configure a couple other lines that referenced the ACLs, everything is fine again.

If there's anything else I need to clarify let me know

 

vpn site-to-site issues with a cisco asa

It kinda does, but I can't see that being the issue. I found this error when doing some debugging on the ASA:

ike initiator unable to find policy

With some googling, it has to do with the crypto map of the access list for what traffic to encrypt; in my case the outbound_tunnel access list. Unfortunately the few fixes ive seen have not worked for me. I do see a lot of configs using just static maps. I've tried removing: "crypto dynamic-map dmap 20 set transform-set ts2 " but then the vpn wont fully establish.