[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1229
  • Last Modified:

Management Console on ASA 5505

Hello all -

We often have to configure firewalls (almost exclusively ASA 5505s at the moment) for our sales offices all over the country.  When we order a new one, it comes to us here at the helpdesk for us to configure and then ship out to wherever it needs to go.  I was wondering if there was a way to get into the Management console of these devices (that are still at factory defaults) without the need to use the management cable.  It just seems silly that we still need to use a serial port for technology that is created in 2011.  I have to keep a 6 year old laptop laying around here just for that purpose.

Now, I know that I could telnet into the device and even get to the ADSM using an ethernet cable.  But I still have to turn those settings on, and the only way to do that (that I know of) is to connect to the management console with the serial cable.

I've done some searches on this topic, but haven't found anything to address this particular issue.  So to summarize, can I get into the management console via some other means than a serial port when the device is still at factory defaults?

Thank you.

-Adam
0
BpcAdam
Asked:
BpcAdam
  • 3
  • 2
1 Solution
 
fritz5150Commented:
if you boot your laptop up while it is plugged into eth1 on the 5505 it will get assigned an ip address via dhcp. then just look at your address assigned to the laptop find out the gateway and there you go.

You can then telnet to the assigned gateway address and you are ready to configure it.
0
 
BpcAdamAuthor Commented:
I thought that DHCP wasn't enabled by default?  I did try just renewing my IP hoping it would get assigned one, but that didn't work.  I even set the IP manually to be on the same subnet as the device is by default (192.168.1.0) but that didn't work either.  Is it really necessary to reboot the computer for this to work?

Also, I don't need to have a crossover cable do I?

Thanks,
Adam
0
 
fritz5150Commented:
The default IP Address of the ASA should be 192.168.1.1
You should not need to reboot, just doing a release and renew.
No crossover cable is needed.

The following is verbatim from Cisco site
Step 1 Connect the power supply adaptor to the power cable.

Step 2 Connect the rectangular connector of the power supply adaptor to the power connector on the rear panel of the ASA.

Step 3 Connect the AC power connector of the power cable to an electrical outlet. (The ASA does not have a power switch. Completing this step powers on the device.)

Step 4 Check the Power LED on the front of the ASA; if it is solid green, the device is powered on.

Step 5 If you connected a PC to the ASA to run ASDM, restart the PC. (The PC obtains a dynamic IP address from the ASA and must be restarted.)

Step 6 Check the LINK/ACT indicators to verify interface connectivity.

0
 
BpcAdamAuthor Commented:
That worked!  I don't understand why it forces you to reboot rather than just do a release/renew, but meh.  I'll just be happy that it works.

Thanks fritz!

-Adam
0
 
BpcAdamAuthor Commented:
Telnet is not enabled by default, but it will allow you to get into the ADSM.  Which you can then enable Telnet from there.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now