topic Re: Setting UP a SECOND ASA5506-x firewall in Network Security

Setting UP a SECOND ASA5506-x firewall

Myleslandish — Fri, 19 Apr 2024 01:28:39 GMT

Hello, I successfully set up/configured my first ASA device. I just purchased as second 5506 and am wondering about how compatible or incompatible the bkup configuration files I’ve saved from the first device are gonna be with the second ASA. It mentioned something about a master passphrase when making the bkup. It just started to say this and I’m sure it’s bc I changed a setting on the device and I’m just trying to figure out how to get it bk to a standard one without the master pass phrase being necessary to use it on a secondary device.

Re: Setting UP a SECOND ASA5506-x firewall

Georg Pauwen — Fri, 19 Apr 2024 05:49:48 GMT

Hello,

the master passphrase has nothing to do with the content of the backup file, it acts as a key to decrypt the backup file when it needs to be restored. I assume you used the command ' write memory encrypt' when you made the backup ?

Re: Setting UP a SECOND ASA5506-x firewall

MHM Cisco World — Fri, 19 Apr 2024 06:51:16 GMT

Both same platform and same ver.

If yes then backup config to tftp and then download it for second asa.

MHM

Re: Setting UP a SECOND ASA5506-x firewall

Myleslandish — Fri, 19 Apr 2024 08:32:16 GMT

At few weeks into it I got into a part with keys being given and or generated. So I just assumed it had something to do with that. Idk if I tried to reset bk to a config before I ever did those changes.

Re: Setting UP a SECOND ASA5506-x firewall

Aref Alsouqi — Fri, 19 Apr 2024 09:44:27 GMT

The master passphrase is used to encrypt the plain text passwords with a specific key you configure on the ASA. Did you try to use the command "show system:running-config" and see if you can see the password in an unencrypted format? also, why not to add this new firewall as a secondary device and form an HA pair?

Re: Setting UP a SECOND ASA5506-x firewall

Myleslandish — Fri, 19 Apr 2024 10:23:15 GMT

I haven’t been able to use cl

Re: Setting UP a SECOND ASA5506-x firewall

Myleslandish — Fri, 19 Apr 2024 10:24:24 GMT

I have looked at the files in text format and that was how I was able to activate an identity certificate and something else

Re: Setting UP a SECOND ASA5506-x firewall

Myleslandish — Fri, 19 Apr 2024 10:25:26 GMT

HA pair is what? For real, I’m low on this totem ppl

Re: Setting UP a SECOND ASA5506-x firewall

Aref Alsouqi — Fri, 19 Apr 2024 10:35:49 GMT

Sorry if I missed this, but why you were not able to get access into CLI?

Check out this link please about how to configure high availability on the ASA firewalls:

Cisco ASA Active/Passive Failover Configuration Example (packetswitch.co.uk)

Re: Setting UP a SECOND ASA5506-x firewall

Myleslandish — Fri, 19 Apr 2024 14:03:03 GMT

I’ve noticed it seems to have a cl to use on the ASDM; and I’ve used a few from the selections but i haven’t been able to connect to it with the console or whatever. Would any and all commands work on the ASDM same as the standard cl?

Re: Setting UP a SECOND ASA5506-x firewall

Myleslandish — Fri, 19 Apr 2024 14:04:26 GMT

I didn’t

Re: Setting UP a SECOND ASA5506-x firewall

Myleslandish — Fri, 19 Apr 2024 14:05:50 GMT

Same device 5506-x with firepower. But I don’t believe it goes beyond that in similarities. I just wish I could copy the first one to the second

Re: Setting UP a SECOND ASA5506-x firewall

Aref Alsouqi — Sat, 20 Apr 2024 11:55:55 GMT

Yes, "ASDM > Tools > Command Line Interface" should give you the same output as if you are connected to the firewall CLI.

Re: Setting UP a SECOND ASA5506-x firewall

Myleslandish — Tue, 23 Apr 2024 03:01:57 GMT

Good to hear; thanku