http://www.mailbeyond.com/restoring-factory-defaults-to-the-cisco-asa5505-firewall-via-the-console
https://supportforums.cisco.com/thread/2111736
http://www.cisco.com/en/US/docs/security/asa/asa71/configuration/guide/trouble.html#wp1062992
Steps:
- connect by console cable. It will show "ciscoasa>"
- type "enable" and enter your password to enable mode
- type "config t"
- type "config factory-default"
- hit spacebar when the ‘more’ thing happens
- type "reload save-config noconfirm"
- It will reboot. And you can't go to enable by blank password. So you need to reset password.
- Power on the device. When it prompts to interrupt boot sequence, do so (press Esc).
- It should show "rommon #0>"
- type "confreg".
- It Should show "Do you wish to change this configuration? y/n [n]:". Press "n".
- type "confreg 0×41"
- type "reboot"
- after it boot up, you can go to enable mode by blank password.
- aaa authentication ssh console LOCAL
- aaa authentication http console LOCAL
- aaa authentication telnet console LOCAL
- username cisco password cisco privilege 15
- ssh 0.0.0.0 0.0.0.0 outside
- ssh 0.0.0.0 0.0.0.0 inside
- telnet 0.0.0.0 0.0.0.0 outside
- telnet 0.0.0.0 0.0.0.0 inside
- http server enable
- http 0.0.0.0 0.0.0.0 outside
- http 0.0.0.0 0.0.0.0 inside
- interface Vlan 1
- nameif inside
- security-level 100
- ip address 192.168.1.254 255.255.255.0
- interface Vlan 2
- nameif outside
- security-level 0
- ip address 10.0.0.254 255.255.255.0
- interface GigabitEthernet0/0
- switchport access vlan 1
- interface GigabitEthernet0/3
- switchport access vlan 2
hostname(config)# config-register 0x1
hostname(config)# write memory
沒有留言:
張貼留言