Solved

Cannot connect to Cisco ASA5505

Posted on 2010-09-21
11
1,084 Views
Last Modified: 2012-05-10
Hi.  For some strange reason I cannot connect to my ASA5505.  It was working fine and stopped working today.  I am not able to connect to any computers on the INSIDE and am not able to connect to the OUTSIDE (internet).  Firewall is up and lights are flashing.  I have tried using Putty and the ADSM console, but no luck connecting to the Firewall.  I am not sure how to troubleshoot this.  Can anyone provide tips?
0
Comment
Question by:obautista
  • 6
  • 5
11 Comments
 
LVL 6

Accepted Solution

by:
kuoh earned 500 total points
Comment Utility
Check that the Power, Status and Active LEDs are on solid and green.  Flashing or an amber color indicates problems and may require a console cable to troubleshoot further.
0
 

Author Comment

by:obautista
Comment Utility
Power and Active are solid green. Active is not lit at all. I have a console cable connected to it, but have never connected that way. What does the Active light on lit indicate?
0
 

Author Comment

by:obautista
Comment Utility
Sorry - I meant Power and Status are solid green.  Active is not on.
0
 
LVL 6

Assisted Solution

by:kuoh
kuoh earned 500 total points
Comment Utility
Active indicates that the ASA is up and forwarding traffic.  You're using the blue cable that came with the ASA with an RJ45 on one end and a DB9 serial on the other right?  If not, then you need to find that cable and connect the DB9 end to your PC's serial port.  Then you can use Hyperterminal to open the serial port, usually COM1 or COM2, with 9600,8,N,1.  Once the session is open, reset power to the ASA and you should see startup and status messages scroll by as the ASA performs startup diagnostics and boots the OS.  Hopefully, one of the messages will give us a clue to the problem.
0
 

Author Comment

by:obautista
Comment Utility
Sorry.  I do have the cable connected.  I have always used Putty to connect to it.  When I type in the IP of 192.168.1.1 on Port 23 it isnt connecting.  It always had before.
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
LVL 6

Assisted Solution

by:kuoh
kuoh earned 500 total points
Comment Utility
The console port is serial only, not IP, that's why it isn't connecting.  It is #3 in this image.

http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/install.html#wp1069253

The console cable looks like this and may have an integrated DB9 or detachable RJ45 to DB9 adapter like in this image.

http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/install.html#wp1064514

  I don't use Putty, so I don't know if it's capable of opening COM ports.  You should just use Hyperterminal for now so you can at least see the diag messages from the ASA.
0
 

Author Comment

by:obautista
Comment Utility
Thanks.  I installed HyperTerminal.  What is the command to reset the power?
0
 

Author Comment

by:obautista
Comment Utility
The window shows rommon #0> right now.
0
 
LVL 6

Assisted Solution

by:kuoh
kuoh earned 500 total points
Comment Utility
You can try "boot" or just pull the power plug, wait 5 seconds, plug it back in.
0
 

Author Comment

by:obautista
Comment Utility
Awesome!  "boot" worked.  I am back in business.  Thanks so much.  What do you suspect caused the problem?  It was working all along.
0
 
LVL 6

Assisted Solution

by:kuoh
kuoh earned 500 total points
Comment Utility
I would recommend a few more power cycles with the console cable connected to verify that the problem does not recur.  The ASA doesn't usually drop into ROMMON for no reason, so I'm leaning toward either a failing RAM or flash module.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

This article assumes you have at least one Cisco ASA or PIX configured with working internet and a non-dynamic, public, address on the outside interface. If you need instructions on how to enable your device for internet, or basic configuration info…
Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now