📝 Section Review: Basics & Setup
اہم نکاتKey TakeawaysKey Takeaways
- ASAv hardware والا same ASA OS اور CLI چلاتا ہے — یہاں سیکھی ہوئی ہر چیز physical ASAs پر apply ہوتی ہے۔ASAv hardware wala same ASA OS aur CLI chalata hai — yahan seekhi hui har cheez physical ASAs par apply hoti hai.The ASAv runs the same ASA OS and CLI as hardware — everything learned here applies to physical ASAs.
- nameif interface کو پہچان دیتا ہے؛ security-level (0–100) interfaces کے درمیان default trust طے کرتا ہے۔nameif interface ko pehchan deta hai; security-level (0–100) interfaces ke darmiyan default trust tay karta hai.nameif gives an interface its identity; security-level (0–100) decides default trust between interfaces.
- High سے low security levels تک traffic freely جاتا ہے؛ low سے high کے لیے explicit ACL چاہیے۔High se low security levels tak traffic freely jata hai; low se high ke liye explicit ACL chahiye.Traffic flows freely from high to low security levels; low to high needs an explicit ACL.
- ASDM اور CLI same running-config edit کرتے ہیں — speed کے لیے CLI، visual monitoring کے لیے ASDM use کریں۔ASDM aur CLI same running-config edit karte hain — speed ke liye CLI, visual monitoring ke liye ASDM use karo.ASDM and CLI edit the same running-config — use CLI for speed, ASDM for visual monitoring.
- ہمیشہ `write memory` سے save کریں؛ interfaces `show interface ip brief` سے اور routes `show route` سے verify کریں۔Hamesha `write memory` se save karo; interfaces `show interface ip brief` se aur routes `show route` se verify karo.Always save with `write memory`; verify interfaces with `show interface ip brief` and routes with `show route`.
خود جانچ (مشق)Self-Check (Practice)Self-Check (Practice)
یہ مشقی سوالات ہیں، امتحانی سوالات نہیں۔These are practice questions, not exam questions.These are practice questions, not exam questions.
❓ Security levels کے درمیان default traffic rules بتائیں۔Security levels ke darmiyan default traffic rules batao.State the default traffic rules between security levels.
Higher سے lower default allow ہوتا ہے (stateful return permitted)؛ lower سے higher deny ہوتا ہے جب تک ACL permit نہ کرے۔ Same-level interfaces `same-security-traffic permit inter-interface` کے بغیر بات نہیں کر سکتے۔Higher se lower default allow hota hai (stateful return permitted); lower se higher deny hota hai jab tak ACL permit na kare. Same-level interfaces `same-security-traffic permit inter-interface` ke baghair baat nahi kar sakte.Higher to lower is allowed by default (stateful return permitted); lower to higher is denied unless an ACL permits it. Same-level interfaces cannot talk without `same-security-traffic permit inter-interface`.
❓ نئے ASA کے initial setup steps list کریں۔Naye ASA ke initial setup steps list karo.List the initial setup steps for a new ASA.
Hostname اور domain-name (SSH keys کے لیے domain ضروری)، enable/passwd passwords، nameif/security-level/IP والا management interface، mgmt subnet تک restricted RSA key + SSHv2، HTTP server + ASDM image، local admin user، `write memory`۔Hostname aur domain-name (SSH keys ke liye domain zaroori), enable/passwd passwords, nameif/security-level/IP wala management interface, mgmt subnet tak restricted RSA key + SSHv2, HTTP server + ASDM image, local admin user, `write memory`.Hostname and domain-name (domain needed for SSH keys), enable/passwd passwords, management interface with nameif/security-level/IP, RSA key + SSHv2 restricted to the mgmt subnet, HTTP server + ASDM image, local admin user, `write memory`.
❓ ASA کو internet reachability کیسے دیتے ہیں؟ASA ko internet reachability kaise dete ho?How do you give the ASA internet reachability?
`route outside 0.0.0.0 0.0.0.0 203.0.113.1 1` — ISP gateway کی طرف outside interface سے default route۔ `show route` سے verified۔`route outside 0.0.0.0 0.0.0.0 203.0.113.1 1` — ISP gateway ki taraf outside interface se default route. `show route` se verified.`route outside 0.0.0.0 0.0.0.0 203.0.113.1 1` — a default route out the outside interface to the ISP gateway. Verified with `show route`.