2013年1月25日 星期五

Cisco ASA 5505 restore to factory default via console

Reference:
http://www.mailbeyond.com/restoring-factory-defaults-to-the-cisco-asa5505-firewall-via-the-console
https://supportforums.cisco.com/thread/2111736
http://www.cisco.com/en/US/docs/security/asa/asa71/configuration/guide/trouble.html#wp1062992

Steps:
  1. connect by console cable. It will show "ciscoasa>"
  2. type "enable" and enter your password to enable mode
  3. type "config t"
  4. type "config factory-default"
  5. hit spacebar when the ‘more’ thing happens
  6. type "reload save-config noconfirm"
  7. It will reboot. And you can't go to enable by blank password. So you need to reset password.
  8. Power on the device. When it prompts to interrupt boot sequence, do so (press Esc).
  9. It should show "rommon #0>"
  10. type "confreg".
  11. It Should show "Do you wish to change this configuration? y/n [n]:". Press "n".
  12. type "confreg 0×41"
  13. type "reboot"
  14. after it boot up, you can go to enable mode by blank password.

Initial configuration:
  • aaa authentication ssh console LOCAL 
  • aaa authentication http console LOCAL 
  • aaa authentication telnet console LOCAL

  • username cisco password cisco privilege 15

  • ssh 0.0.0.0 0.0.0.0 outside
  • ssh 0.0.0.0 0.0.0.0 inside
  • telnet 0.0.0.0 0.0.0.0 outside
  • telnet 0.0.0.0 0.0.0.0 inside
  • http server enable
  • http 0.0.0.0 0.0.0.0 outside
  • http 0.0.0.0 0.0.0.0 inside

  • interface Vlan 1
  • nameif inside
  • security-level 100
  • ip address 192.168.1.254 255.255.255.0 

  • interface Vlan 2
  • nameif outside
  • security-level 0
  • ip address 10.0.0.254 255.255.255.0 

  • interface GigabitEthernet0/0
  • switchport access vlan 1

  • interface GigabitEthernet0/3
  • switchport access vlan 2
Post-Steps for saving configuration: (Important!!)
hostname(config)# config-register 0x1
hostname(config)# write memory
Now you can connect to the ASA 5500 via https://192.168.1.254/admin.

沒有留言:

張貼留言