Configuring Cisco ASAv in GNS3

I was looking for a new convenient lab solution to run on natively on my PC rather than fire up my noisy dedicated HP Proliant Lab server, in order to use the Cisco ASAv. I’ve used GNS3 for IOS devices regularly but never had the chance to use the ASAv. This blog post details the configuration steps I took in order to configure Cisco ASAv with GNS3.

GNS3 Configuration

The ASAv image file is added to GNS3 as a QEMU VM Template, this is where I ran into my first issue, evidently for best performance I need to download GNS3 VM, it is recommended to run this within VMware Workstation rather than VirtualBox.

• Download the Cisco ASAv hda image file (asav952.qcow2) from the Cisco website.
  
• Download VMware Workstation Player 12.1.1 and install using the default settings
  
• Download VMware VIX 1.15 application and install using the default settings
  
• Download the GNS3 VM for VMware Workstation v 1.5.1 from the GNS3 website
  
• Extract the contents of the GNS3 VM zip to a folder
  

Home Lab

I primarily work deploying network infrastructure systems using vendors such as Aruba (Wireless, Remote Access and Access Management), Cisco (Routing/Switching and Security), Check Point (Firewall, VPN, Identity Awareness etc) as well as core Microsoft infrastructure systems (AD, DHCP, DNS, Certificate Authority etc). I use my home lab for certification studying; with my current focus the CCNP R&S as well as testing new solutions and ideas. Outside of studying for certifications I plan on testing ideas for DMVPN Dual Hub configuration, FlexVPN, Cisco AnyConnect, Cisco ISE, Aruba ClearPass (Guest, OnBoard etc).

Current Setup

Until recently my virtualised home lab was running on my PC running multiple OS within VMware Workstation, when running multiple systems at once this caused the VMs to ground to a halt. I also have physical hardware that consists of:

• 1 x Cisco 1921 router v15.6
• 3 x Cisco 1811 routers (c181x-advipservicesk9-mz.124-24.T1)
• 3 x Cisco 3560-8 POE switch (c3560-ipservicesk9-mz.122-53.SE)
• 1 x Cisco 3750-24 switch (c3750-ipservicesk9-mz.122-55.SE4.bin)
  

Most of the systems can be run from software, with the exception of LAN switching and WLAN controller. With the Cisco CSR 1000v virtual router I should be able to complete most if not all studying for the CCNP ROUTE 2.0 exam (I have already passed SWITCH 1.0). I plan on de-commissioning all but the Cisco 3750 switch and using all virtual systems.