Solved

Cisco ASA 5505

Posted on 2008-09-30
7
848 Views
Last Modified: 2012-06-27
Hi Experts,

I'm using IE (https) to try to change the default ip address from 192.168.1.  to my preferred LAN ip address, whne it try to send the command to ASA, it doesn't get through.

I even tried with the wizard but again it doesn't complete the changes.

I have not tried the console yet to change the default ip.

Any suggestion?

thanks
mcse2007
0
Comment
Question by:mcse2007
  • 3
  • 3
7 Comments
 
LVL 1

Expert Comment

by:Foo_Guru
ID: 22611736
When you say it "doesn't get through" what exactly happens? IS there an error?

Obviously if you change the IP when connected to the old IP  you will lose connectivity. So you can go into configuration (assuming you are logged into it with level 15 security) change the interface IP and then click apply.

After you click apply you need to close the browser, which is easier to just close the smaller window which loads the applet as it will close them both. Then browse to the new IP via HTTPS and make sure you save it.

Console is the best way to do this, but via browser works too you just have to go through more steps.

Hope that helps!
0
 
LVL 12

Expert Comment

by:Pugglewuggle
ID: 22611749
The browser setup on the ASA works sometimes... If you can avoid it, please do so. Instead use the ASDM startup wizard if you don't know a lot about the ASAs or PIXes. If you are familiar with the ASA, I recommend using the CLI for management instead.
If you need help with configuring it for internet access let me know - I'll send you the commands to put into the console.
Cheers! :-)
0
 
LVL 7

Author Comment

by:mcse2007
ID: 22611854
There is an issue with the ASDM when I try to reach the router, see enclosed so I resorted to IE but cannot change the bloody ip address since it doesn't complete the changes, ie error in command etc.etc

By default, the router can be reached through HTTPS/ASDM, so how do I change the vlan1 ip address through CONSOLE, then change it back to HTTPS/ASDM. At the moment, I cannot even access it through HTTPS, it says 'done' on the bottom left hand corner. I'm thinking about pressing the 'reset' button.



error.JPG
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 12

Accepted Solution

by:
Pugglewuggle earned 250 total points
ID: 22611925
On console to enable ASDM access run the following commands (replace xxxxxxx with your password - passwd and enable password must be different - WRITE THESE DOWN- THESE ARE YOUR MASTER PASSWORDS):
passwd xxxxxxx
enable password xxxxxxx
!
password
interface vlan 1
nameif inside
ip address 192.168.1.1 255.255.255.0
security-level 100
no shut
!
interface ethernet 0/1
switchport access vlan 1
no ip address
no shutdown
!
crypto rsa key generate mod 1024
!

http server enable
http 192.168.1.0 255.255.255.0 inside

Connect the PC to the ASA on ethernet port 0/1 (second one) and assign the PC a static IP of 192.168.1.2 with a subnet mask of 255.255.255.0 and a default gateway of 192.168.1.1
Now try accessing the ASDM with a blank username and your passwd (not enable)
You can now run the startup wizard.
Cheers! Let me know if that does it!
0
 
LVL 7

Author Comment

by:mcse2007
ID: 22611966
By default, asa appliance can only accessible by https/asdm?

So the issue is  I'm connected to ASA by console, then power restart it, open a terminal session but all I can see some wierd characters.
0
 
LVL 12

Expert Comment

by:Pugglewuggle
ID: 22612003
You can always access the console (unless you lock yourself out of it when configuring AAA).
Make sure your console settings are:
speed: 9600
data bits: 8
stop bits: 1
parity: none
flow control: xon/xoff.
I use a terminal program called putty. It's very good. Probably the most popular one out there.
http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html
One other thing: you should NEVER have to power cycle an ASA unless you're upgrading the software or the activation key. Just letting you know. :-) These devices are designed to run for years without stopping provided you don't reboot them - even when the config is completely changed you shouldn't ever have to reboot it. Restarting it won't fix anything unless you didn't save the latest config - it will just reload the last saved one on reboot - but you lose everything you've done on it since last save.
0
 
LVL 7

Author Closing Comment

by:mcse2007
ID: 31501849
I've download the latest JAVA program, installed then was able to using ASDM and abled to change the vlan1 ip address to preferred ip address.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Suggested Solutions

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now