topic Re: Change ASA Firewall Address in Network Security

Change ASA Firewall Address

mikros — Mon, 11 Mar 2019 11:11:19 GMT

When I go through the ASDM manager and change the IP address of the ASA5505 unit and write to memory I get an error. Is there a way to do this via the console port? Thanks

Re: Change ASA Firewall Address

whisperwind — Fri, 14 Sep 2007 14:08:19 GMT

1. Connect to the ASA

2. Enter Configuration mode

3. Enter the interface type and number

4. Enter the new ip address

5. Save configuration

This will look as follows, were x is ip address and y is mask:

asa(conf)# int e0

asa(conf-if)# ip address x.x.x.x y.y.y.y

Re: Change ASA Firewall Address

JORGE RODRIGUEZ — Fri, 14 Sep 2007 14:10:07 GMT

Yes you can, follow the process on this link

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/intparam.html#wp1051819

Jorge

Re: Change ASA Firewall Address

mikros — Fri, 14 Sep 2007 14:19:01 GMT

Here is what I typed

enable

p/w

config t

int e0 and I get and error "% Incomplete Command"

TIA

Re: Change ASA Firewall Address

JORGE RODRIGUEZ — Fri, 14 Sep 2007 14:31:11 GMT

please post " show interface " or follow the link I posted for complete CLI syntax.

Re: Change ASA Firewall Address

whisperwind — Fri, 14 Sep 2007 14:36:19 GMT

My example said e0, your ASA likely has a different interface type / number, once you determine what that is and enter it in place of my example you should be fine.

A sh run or sh interface will provide that information for you

Re: Change ASA Firewall Address

JORGE RODRIGUEZ — Fri, 14 Sep 2007 14:43:32 GMT

I agree with Whisper, his example script with int e0 should have worked !

Re: Change ASA Firewall Address

mikros — Fri, 14 Sep 2007 14:50:52 GMT

when I type sh run I get

Ethernet0/0 - Ethernet0/8

Re: Change ASA Firewall Address

JORGE RODRIGUEZ — Fri, 14 Sep 2007 14:54:08 GMT

are you sure you have an ASA,

do " show version " and post info.

Re: Change ASA Firewall Address

mikros — Fri, 14 Sep 2007 14:56:38 GMT

ASA 8.0(2)

Device Mgr 6.0(2)

ASA5505

Re: Change ASA Firewall Address

whisperwind — Fri, 14 Sep 2007 15:03:12 GMT

Well there you go, your ASA has interfaces labelled as ethernet 0/0 and so forth 🙂

Re: Change ASA Firewall Address

mikros — Fri, 14 Sep 2007 15:07:11 GMT

I can get to Ethernet0/0 then when I type

ip address x.x.x.x y.y.y.y I get an Error "This can only be configured on VLAN devices"

Re: Change ASA Firewall Address

JORGE RODRIGUEZ — Fri, 14 Sep 2007 15:10:05 GMT

Go to this link, you actually have to configure the ip in VLAN1 and/or VLAN2 instead of the physcal inetertace as this comes as default configuration for the 5505s

so you would do

config t

interface vlan#

http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/setup.html#wpxref79743

Defaults

Two VLANs: VLAN 1 and VLAN2

?VLAN 1 has the following properties:

?Named "inside"

?Allocated switch ports Ethernet 0/1 through Ethernet 0/7

?Security level of 100

?Allocated switch ports Ethernet 0/1 through 0/7

?IP address of 192.168.1.1 255.255.255.0

?VLAN2 has the following properties:

?Named "outside"

?Allocated switch port Ethernet 0/0

?Security level of 0

?Configured to obtain its IP address using DHCP

Re: Change ASA Firewall Address

mikros — Fri, 14 Sep 2007 15:32:06 GMT

So after I type interface vlan1

I type ip address x.x.x.x y.y.y.y and I get an error "interface address is not on the same subnet as DHCP pool" should I disable DHCP and if so how?

Re: Change ASA Firewall Address

JORGE RODRIGUEZ — Fri, 14 Sep 2007 15:35:45 GMT

see my previous post.

configure the ip addresses through VLAN#

your inside vlan is VLAN1 and VLAN2 is your outside.

config t

interface vlan1

ip address x.x.x.x MASK

Re: Change ASA Firewall Address

mikros — Fri, 14 Sep 2007 15:49:19 GMT

I did that and thats when I get the Error "Interface Address is not on the subnet as your DHCP Pool". I believe my subnet is 255.255.255.255 is there a way to check?

Re: Change ASA Firewall Address

JORGE RODRIGUEZ — Fri, 14 Sep 2007 16:15:52 GMT

do this, if you are connected via console through hyperterminal do a capture-text from the terminal , do show run and save the file as config.txt ..then paste or attach the whole confiuration here.. to take a look at it.. we will need to remove the default dhcp pool configuration in order for you to configure the interface.. thats why it wil not take a different IP block because it does not match the default dhcp pool.

Re: Change ASA Firewall Address

mikros — Fri, 14 Sep 2007 16:28:06 GMT

Ok here is the file.

Re: Change ASA Firewall Address

JORGE RODRIGUEZ — Fri, 14 Sep 2007 17:14:25 GMT

go to enable mode and issue

no dhcpd address 192.168.1.2-192.168.1.33 inside

then configure the vlan to re-ip the interface after that is done go back to placing back dhcp pool for your inside network using your new IP subnet information, follow the pool format you removed for the IP range.

Re: Change ASA Firewall Address

JORGE RODRIGUEZ — Fri, 14 Sep 2007 20:43:19 GMT

Dennis, thanks for the ratings..

Also rememenber to save configuration every time you make changes at the command line by issuing " write mem " , by not doing so your config will be lost when you reboot the firewall.

Thanks

Jorge