• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 861
  • Last Modified:

Cisco ASA 5505

Hi Experts,

I'm using IE (https) to try to change the default ip address from 192.168.1.  to my preferred LAN ip address, whne it try to send the command to ASA, it doesn't get through.

I even tried with the wizard but again it doesn't complete the changes.

I have not tried the console yet to change the default ip.

Any suggestion?

thanks
mcse2007
0
mcse2007
Asked:
mcse2007
  • 3
  • 3
1 Solution
 
Foo_GuruCommented:
When you say it "doesn't get through" what exactly happens? IS there an error?

Obviously if you change the IP when connected to the old IP  you will lose connectivity. So you can go into configuration (assuming you are logged into it with level 15 security) change the interface IP and then click apply.

After you click apply you need to close the browser, which is easier to just close the smaller window which loads the applet as it will close them both. Then browse to the new IP via HTTPS and make sure you save it.

Console is the best way to do this, but via browser works too you just have to go through more steps.

Hope that helps!
0
 
PugglewuggleCommented:
The browser setup on the ASA works sometimes... If you can avoid it, please do so. Instead use the ASDM startup wizard if you don't know a lot about the ASAs or PIXes. If you are familiar with the ASA, I recommend using the CLI for management instead.
If you need help with configuring it for internet access let me know - I'll send you the commands to put into the console.
Cheers! :-)
0
 
mcse2007Author Commented:
There is an issue with the ASDM when I try to reach the router, see enclosed so I resorted to IE but cannot change the bloody ip address since it doesn't complete the changes, ie error in command etc.etc

By default, the router can be reached through HTTPS/ASDM, so how do I change the vlan1 ip address through CONSOLE, then change it back to HTTPS/ASDM. At the moment, I cannot even access it through HTTPS, it says 'done' on the bottom left hand corner. I'm thinking about pressing the 'reset' button.



error.JPG
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
PugglewuggleCommented:
On console to enable ASDM access run the following commands (replace xxxxxxx with your password - passwd and enable password must be different - WRITE THESE DOWN- THESE ARE YOUR MASTER PASSWORDS):
passwd xxxxxxx
enable password xxxxxxx
!
password
interface vlan 1
nameif inside
ip address 192.168.1.1 255.255.255.0
security-level 100
no shut
!
interface ethernet 0/1
switchport access vlan 1
no ip address
no shutdown
!
crypto rsa key generate mod 1024
!

http server enable
http 192.168.1.0 255.255.255.0 inside

Connect the PC to the ASA on ethernet port 0/1 (second one) and assign the PC a static IP of 192.168.1.2 with a subnet mask of 255.255.255.0 and a default gateway of 192.168.1.1
Now try accessing the ASDM with a blank username and your passwd (not enable)
You can now run the startup wizard.
Cheers! Let me know if that does it!
0
 
mcse2007Author Commented:
By default, asa appliance can only accessible by https/asdm?

So the issue is  I'm connected to ASA by console, then power restart it, open a terminal session but all I can see some wierd characters.
0
 
PugglewuggleCommented:
You can always access the console (unless you lock yourself out of it when configuring AAA).
Make sure your console settings are:
speed: 9600
data bits: 8
stop bits: 1
parity: none
flow control: xon/xoff.
I use a terminal program called putty. It's very good. Probably the most popular one out there.
http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html
One other thing: you should NEVER have to power cycle an ASA unless you're upgrading the software or the activation key. Just letting you know. :-) These devices are designed to run for years without stopping provided you don't reboot them - even when the config is completely changed you shouldn't ever have to reboot it. Restarting it won't fix anything unless you didn't save the latest config - it will just reload the last saved one on reboot - but you lose everything you've done on it since last save.
0
 
mcse2007Author Commented:
I've download the latest JAVA program, installed then was able to using ASDM and abled to change the vlan1 ip address to preferred ip address.
0

Featured Post

Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now