# Configure Static IP Addressing on Cisco ASA 5505

Static IP addressing is a common requirement for many organizations when setting up firewalls like Cisco's ASA series. This article provides step-by-step instructions on how to configure static IP addresses on your Cisco ASA 5505 device.

## Prerequisites

Before you begin, ensure that:

1. You have access to the ASA console or CLI (Command Line Interface) via Telnet/SSH.

2. Your ASA is in 'boot mode' and prompted with `>`.

3. You know the default password for your specific ASA model (`cisco` by default).

## Step 1: Accessing the ASA Console

To access the ASA's console, follow these steps:

a) Connect an RJ-45 cable from a console port on your computer to one of the serial ports (usually Serial0/0 or CONSOLE) on the back of your ASA.

b) Ensure that both ends are set up correctly for serial communication at 9600 baud rate, 8 data bits, and no parity (`9600 8-N1`).

c) On Windows, open 'HyperTerminal' or an equivalent terminal client. For Mac OS X/FreeBSD/Linux, use `telnet`.

d) Press Enter to access the ASA console prompt.

## Step: Configure Interface Speed & Duplex

```sh

interface GigabitEthernet0/0

speed auto

duplex auto

```

Press 'Enter' after each command and wait for the changes to take effect before proceeding with further configuration steps.

### Configuring Static IP Addressing

To configure static IP addressing on your ASA, you will need to use the following commands:

1. interface - This command is used to specify which interface we want to modify.

```sh

(config-if)# ip address

```

Replace `` with your desired IP address and `` with its corresponding subnet mask.

2. ip nat inside source`/`outside destination` - These commands are used to define a static NAT rule between an interface on the ASA (inside) or another device outside of it.

```sh

(confignat statically_map src_ip dst_ip {dst_address | dst-interface} 'description')

```

Here, replace `src_ip` with the source IP address that you want to NAT from and `dst_ip` is where traffic should be directed.

## Example Configuration

As an example let's assume we have two interfaces on our ASA: Gigabit0/1 (our outside interface) which has a public IP of 192.168.100.10/24, and FastEthernet0/1 (inside). We want all traffic coming from the inside to be NAT'd out through the public IP.

```sh

(config)# ip nat source list NatSrcPool type static pool_nat_inside interface Gigabit0/0 netmask 255.255.255.254

```

Next, we'll create a new access-list called `NatSrc` that allows only traffic coming from our inside network:

```sh

(config)#ipaccesslist extended NatSrc permit ip host192.168.100.10

```

Finally, apply this NAT rule to all traffic going out through the outside interface:

```sh

ip nat inside source list NatSrc pool_nat_inside overload

```

With these steps completed you should now have basic static IP address configuration set up on your Cisco ASA 5505 device.

### Troubleshooting Tips

1. Ensure that both ends (ASA and connected devices) are configured correctly for NAT to work properly.

2. Check the console logs or enable debug mode if necessary (`debug ip nat` might be helpful).

3. Verify that your static routes have been applied successfully using `show ip route`.

By following these instructions, you should now have a solid understanding of how to configure static IP addressing on your Cisco ASA 5505 firewall device.

### Additional Resources

For more detailed information about configuring NAT and other advanced features in the ASA series, please refer to:

* 'Cisco ASDM User Guide'(http://www.cisco.com/c/en/tech/security-PIX-firewalls/asdm-user-guide.html)

* 'ASA IOS Command Reference'(https://www.cisco.com/cen/docs/sec_fabr/asa_8.3b1eol/Cc165119.pdf#3029)

Cisco asa 5505 nat configuration