[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1099
  • Last Modified:

Cannot connect to Cisco ASA5505

Hi.  For some strange reason I cannot connect to my ASA5505.  It was working fine and stopped working today.  I am not able to connect to any computers on the INSIDE and am not able to connect to the OUTSIDE (internet).  Firewall is up and lights are flashing.  I have tried using Putty and the ADSM console, but no luck connecting to the Firewall.  I am not sure how to troubleshoot this.  Can anyone provide tips?
0
obautista
Asked:
obautista
  • 6
  • 5
5 Solutions
 
kuohCommented:
Check that the Power, Status and Active LEDs are on solid and green.  Flashing or an amber color indicates problems and may require a console cable to troubleshoot further.
0
 
obautistaAuthor Commented:
Power and Active are solid green. Active is not lit at all. I have a console cable connected to it, but have never connected that way. What does the Active light on lit indicate?
0
 
obautistaAuthor Commented:
Sorry - I meant Power and Status are solid green.  Active is not on.
0
Get Certified for a Job in Cybersecurity

Want an exciting career in an emerging field? Earn your MS in Cybersecurity and get certified in ethical hacking or computer forensic investigation. WGU’s MSCSIA degree program was designed to meet the most recent U.S. Department of Homeland Security (DHS) and NSA guidelines.  

 
kuohCommented:
Active indicates that the ASA is up and forwarding traffic.  You're using the blue cable that came with the ASA with an RJ45 on one end and a DB9 serial on the other right?  If not, then you need to find that cable and connect the DB9 end to your PC's serial port.  Then you can use Hyperterminal to open the serial port, usually COM1 or COM2, with 9600,8,N,1.  Once the session is open, reset power to the ASA and you should see startup and status messages scroll by as the ASA performs startup diagnostics and boots the OS.  Hopefully, one of the messages will give us a clue to the problem.
0
 
obautistaAuthor Commented:
Sorry.  I do have the cable connected.  I have always used Putty to connect to it.  When I type in the IP of 192.168.1.1 on Port 23 it isnt connecting.  It always had before.
0
 
kuohCommented:
The console port is serial only, not IP, that's why it isn't connecting.  It is #3 in this image.

http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/install.html#wp1069253

The console cable looks like this and may have an integrated DB9 or detachable RJ45 to DB9 adapter like in this image.

http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/install.html#wp1064514

  I don't use Putty, so I don't know if it's capable of opening COM ports.  You should just use Hyperterminal for now so you can at least see the diag messages from the ASA.
0
 
obautistaAuthor Commented:
Thanks.  I installed HyperTerminal.  What is the command to reset the power?
0
 
obautistaAuthor Commented:
The window shows rommon #0> right now.
0
 
kuohCommented:
You can try "boot" or just pull the power plug, wait 5 seconds, plug it back in.
0
 
obautistaAuthor Commented:
Awesome!  "boot" worked.  I am back in business.  Thanks so much.  What do you suspect caused the problem?  It was working all along.
0
 
kuohCommented:
I would recommend a few more power cycles with the console cable connected to verify that the problem does not recur.  The ASA doesn't usually drop into ROMMON for no reason, so I'm leaning toward either a failing RAM or flash module.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 6
  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now