topic Cisco ASA Enable Password in Network Security

Cisco ASA Enable Password

thomastb24 — Tue, 12 Mar 2019 03:48:12 GMT

Hey,

I am trying to change the enable password on cisco ASA 5510. I run enable password <password>. I log off, and log back in with my username/password and type en, it asks for a password and enter the password that I just set but it does not work.

what am I missing?

Thanks

Cisco ASA Enable Password

Marius Gunnerud — Fri, 21 Feb 2014 08:43:32 GMT

Are you using the local user database or a TACACS or RADIUS server to authenticate?

If using a TACACS or RADIUS server enter your user password when you type enable. If that doesn't work disconnect the TACACS or RADIUS server and try to enter the enable password you created.

If using the local user database, are you sure that you are entering the password correctly? Perhaps you typed it incorrectly when creating it and accidentally put a space at the begining or end?

If non of the above work then you will need to perform a password recovery:

Reboot your ASA
Press the Esc key to enter ROMON mode when prompted
Change the configuration register value to 0x41 by using the command confreg 0x41
To tell the ASA to ignor the startup configuration issue the command confreg

     Current Configuration Register: 0x00000041

     Configuration Summary:

       boot default image from Flash

       ignore system configuration

     Do you wish to change this configuration? y/n [n]: y

5. At the prompt enter Y

6. Accept all default values when prompted

7. Reload the ASA by enter the command boot

8. When prompted enter enable and leave the password blank

9. Issue the command copy start run

10. Enter configuration mode configure terminal

11. Enter the command no config-register (the value is returned to its default value of 0x1)

12. Save your configuration copy run start

--
Please remember to rate and select a correct answer

Cisco ASA Enable Password

thomastb24 — Fri, 21 Feb 2014 15:23:57 GMT

Hey, thank you for your reply.

I am using the local user database.

Cisco ASA Enable Password

thomastb24 — Fri, 21 Feb 2014 16:16:07 GMT

I am still able to use my password to enter privlege exec mode so I can try and reset the en password again to make sure that I did not have a typo, still does not work.

Cisco ASA Enable Password

Marius Gunnerud — Fri, 21 Feb 2014 17:56:38 GMT

If you are able to log into the device, could you please post a full running config (sanitised).

--
Please remember to rate and select a correct answer

Cisco ASA Enable Password

thomastb24 — Fri, 21 Feb 2014 21:48:00 GMT

I think I got it figured out...

once I removed this:

aaa authentication enable console LOCAL

I was able to change the enable password

Cisco ASA Enable Password

Marius Gunnerud — Mon, 24 Feb 2014 07:30:12 GMT

yes, that command tells the ASA to use your login user password also for the enable password.

Glad you got it figured out

--
Please remember to rate and select a correct answer