Section 2.0: Cisco Firewall (10 Points)

Question 2.1: Network Address Translation (NAT) (3 points)

Configure Network Address Translation (NAT) on ASA1 and ASA2, meeting all the following requirements:

• Do not enable NAT control on ASA1 and ASA2.

• Configure static identity NAT on ASA1/abc1 context for the web server (Sw1 Loopback1). Permit HTTP and HTTPS ports to allow connections from any host to this web server. Verify that you can establish a Telnet connection to this web server on HTTP and HTTPS ports from R6.

• Configure address translation on ASA1/abc2 context such that when R1 establishes a Telnet session to R6 Loopback0 using its source Loopback0, the source address gets translated to 192.168.6.61. However, when R1 establishes the same Telnet session to R6 Loopback0 without using its source Loopback0 (that is, using any other source), it should get translated to 192.168.6.62. Do not use a static NAT command to perform this task.

• Configure static NAT on ASA2 such that Sw2 can reach destination R6 Loopback0 interface using local address 192.168.10.6. Ensure that you can ping and telnet to R6 Loopback0 from Sw2 using IP address 192.168.10.6. Verify the connections table on ASA2 to confirm that your Telnet session to destination R6 Loopback0 (10.6.6.6) is translated to 192.168.10.6.