topic Hi Marvin, in Network Security

Cisco ASA 5516-X Configuration

VCsupport17 — Tue, 12 Mar 2019 09:06:46 GMT

Hello community,

I factory reset the Cisco ASA 5516-x firewall and after booting up the interfaces goes down.

I can console the firewall but what is the command to assign IP address on the interfaces and make goes to up?

Thank you.

Thats expected - default

Marvin Rhoads — Thu, 23 Mar 2017 15:35:48 GMT

Thats expected - default configuration of an ASA is for all interfaces except management to be shutdown.

Configure an interface is simple. From enable mode, switch to configuration mode and enter the commands as follows (example values shown):

conf t
int gi0/0
nameif inside
ip address 192.168.1.1 255.255.255.0
no shut
end

..and so forth for each interface.

Hi Marvin,

VCsupport17 — Thu, 23 Mar 2017 17:51:39 GMT

Hi Marvin,

Thank you for your reply and I know those basic commands for configuring the interfaces but my problem is how can i get in to that config mode?

Once I login on the ASA CLI and type "enable" under User EXEC i cannot get in to that enable mode.

I can go direct to configure commands but i cannot find the commands for the interfaces.

From the screenshot you are

Marvin Rhoads — Fri, 24 Mar 2017 02:24:55 GMT

From the screenshot you are in either the FirePOWER service module or an FTD-imaged device.

Please share the output of "show version" to ascertain which.

Hi Marvin,

VCsupport17 — Sun, 26 Mar 2017 05:40:17 GMT

Hi Marvin,

See below output of show version:

> show version
-----------------[ firepower-int ]------------------
Model : Cisco ASA5516-X Threat Defense (75) Version 6.1.0 (B uild 330)
UUID : fd9b0e52-e48e-11e6-a721-cc4b945ff13c
Rules update version : 2016-03-28-001-vrt
VDB version : 270
----------------------------------------------------

As I suspected, you have

Marvin Rhoads — Sun, 26 Mar 2017 06:58:21 GMT

As I suspected, you have FirePOWER Threat Defense (FTD) image. In this case you can use the on-box FirePOWER Device Manager (FDM) GUI to configure interfaces and all other tasks.

There is a step-by-step guide here:

http://www.cisco.com/c/en/us/td/docs/security/firepower/quick_start/5508X/ftd-fdm-5508x-qsg.html

Basically, both GigabitEthernet1/2 and Management1/1 interfaces should be up by default and serve a DHCP address to a directly attached client. Browse to the 192.168.1.1 or 192.168.45.45 address (according to which of those two interfaces you plugged into) and follow the prompts of the setup wizard.

Hi Marvin,

VCsupport17 — Sun, 26 Mar 2017 07:05:45 GMT

Hi Marvin,

I also expecting that the GE1/2 and Mangement 1/1 still shows up with dafault IP addresses after reset. But after resetting all ports are shutdown. The only way i can access the box now is via CLI.

Any idea how to get the ports up and running using CLI?

That's odd - seems like a bug

Marvin Rhoads — Sun, 26 Mar 2017 07:21:42 GMT

That's odd - seems like a bug.

From the cli you should be able to use:

configure network ipv4 <manual ipaddr> <netmask> <gw>

The FTD command reference cover this and more here:

http://www.cisco.com/c/en/us/td/docs/security/firepower/command_ref/b_Command_Reference_for_Firepower_Threat_Defense/c_3.html#wp3839275562

Hi Marvin,

VCsupport17 — Tue, 04 Apr 2017 12:05:41 GMT

Hi Marvin,

I escalated the problem to TAC support and to resolve the problem, we re-image the box and works fine now. Issue was the the image was corrupted.

Re: Cisco ASA 5516-X Configuration

waheed.sami@mercurymena.COM — Sun, 08 Oct 2017 13:58:04 GMT

I have setup Cisco ASA 5516 with 2 WAN ports for Internet failover. It was working fine till my both WAN ports are on DHCP and I have added static route for failover but since I have changed my WAN1 from DHCP to static IP I am having issue that all my traffic is going out from WAN2 instead of WAN1.

In Static route WAN1 Matrices Distance is 1 and setup as tracked and WAN2 distance is 10.

In monitoring WAN2 is showing as default route instead of WAN1. Please help me to resolve this. Thanks

Waheed Sami.

Re: Cisco ASA 5516-X Configuration

Marvin Rhoads — Sun, 08 Oct 2017 14:32:35 GMT

Can you share the sections of your configuration with the relevant routing and ip sla bits?

Re: Cisco ASA 5516-X Configuration

waheed.sami@mercurymena.COM — Sun, 08 Oct 2017 14:40:30 GMT

Please find attached configuration backup file. If can be helpful.

Re: Cisco ASA 5516-X Configuration

Marvin Rhoads — Sun, 08 Oct 2017 14:46:34 GMT

Please check your posting - no attachment is included yet.

Re: Thats expected - default

santosh_barwa — Wed, 07 Mar 2018 01:26:08 GMT

How to do factory default or reset ASA5516 -X ??

It's a new firewall. And I had just just for practice I applied /created following commands.

Note: I did't apply any license key in it and configured following commands. And unfortunately I got locked. Notable to access cli as well as through GUI. Any way to set factory default??? If any help much appreciated

hostname ASA1

crypto key generate RSA label cciekey modulus 1024

crypto ca trustpoint ccietrust

enrollment self

subject-name CN=ASA1 Of=cisco.com

Then I powered off the device. Thought whatever I have I configured it should erase.

Re: Thats expected - default

Marvin Rhoads — Wed, 07 Mar 2018 07:25:53 GMT

@santosh_barwa,

You've jumped on an old thread about an issue with FTD.

Please start a new discussion for your non-FTD ASA issue.

Re: That's odd - seems like a bug

davicsavir22 — Tue, 11 Dec 2018 21:58:59 GMT

Hi,

i encountered the same issue. Do you know the solution of this issue?

i even reset the firewall to factory defaults but still all interfaces are down and http is not accessible anymore.

thanks

Re: That's odd - seems like a bug

Marvin Rhoads — Wed, 12 Dec 2018 04:11:33 GMT

@davicsavir22

Please tell us the details of your setup.

Re: Cisco ASA 5516-X Configuration

milton robertson — Thu, 17 Jan 2019 19:20:06 GMT

How did you perform the factory reset process? I have been trying for the past hour and still - no success.

Re: Hi Marvin,

shashwat85 — Thu, 16 Jun 2022 12:57:13 GMT

Hi,

I have the same problem after firewall 5516-X reset. All ports are shutdown and there is no IP to all 8 ports and management port.

I can only access the firewall through CLI where i can only see ">" symbol.

I am not able to configure IP to any port as enable is not working here.

Please suggest.

Thanks

Re: Hi Marvin,

Marvin Rhoads — Thu, 16 Jun 2022 13:29:14 GMT

@shashwat85 your device appears to be running the FTD image. It is configured almost exclusively via the GUI. "show managers" will show if it is the default local manager (Firepower Device Manager or FDM GUI) or a central manager (FMC). If it's the local manager, you configure it via https to the management address to call up the GUI in a browser.